| Variables | Items | Factor Loadings | Cronbach’s Alpha | rho_A | Composite Reliability | Average Variance Extracted (AVE) |
| Information Security Management System | Determination of internal and external factors relevant to ISMS | 0.766 | 0.737 | 0.726 | 0.721 | 0.706 |
| The scope of ISMS 270001 documented | 0.749 | |||||
| Established information security policy that is appropriate | 0.814 | |||||
| Roles within the ISMS clearly defined and communicated | 0.800 | |||||
| The ISMS adequately resourced | 0.697 | |||||
| The information security risk assessment process repeatable | 0.744 | |||||
| A program to ensure the ISMS achieves its outcomes | 0.797 | |||||
| There is an information security risk treatment process to select appropriate risk treatment options | 0.723 | |||||
| Corporate Reputation | My company produces quality products | 0.932 | 0.953 | 0.956 | 0.962 | 0.759 |
| My company uses high caliber adverts | 0.916 | |||||
| My company sponsors many activities | 0.701 | |||||
| My company is always willing to welcome visitors to tour the factory | 0.868 | |||||
| My company is a long-established company | 0.828 | |||||
| My company carry out a lot of advertising | 0.901 | |||||
| My company offer a variety of well-known products | 0.891 | |||||
| The employees of my company are well trained | 0.910 | |||||
| Brand and Branding | The brand of my company prefers to be true to them | 0.777 | 0.859 | 0.911 | 0.902 | 0.569 |
| Authenticity of the brand of the company means aesthetic | 0.821 | |||||
| Products of the brand of the company are made genuine and honesty | 0.854 | |||||
| The authenticity is considered as prestige of the brand | 0.768 | |||||
| Authenticity of the brand of the company means reliable | 0.814 | |||||
| The brand of the company needs to note friendly environment | 0.904 | |||||
| The brand of the company explains the morality | 0.739 | |||||
| Advertising of the brand of my company sometimes is too exaggerated | 0.858 |