The study looked at how information security behaviors in shipping and port organizations affect information security performance. They found that factors like information security attitude and standards influence awareness, while compliance with security policies is influenced by standards. Punishments and training don't affect policy compliance. Awareness impacts policy compliance, competence, and behavior, which in turn affect information security performance. Compliance with security policies influences competence and behavior, which ultimately impact performance.