Employee security compliance behavior has become a critical safeguard to protect the security of corporate information assets. Focusing on human factors, how to regulate and guide employees' compliance with information security systems through effective methods was discussed. Based on protection motivation theory (PMT) and social cognitive theory, a cross-level analysis method was adopted to construct a research model with employees' intention to comply with the information security system as the dependent variable, information security climate as the organisational level variable, and perceived severity, perceived vulnerability, response efficacy and self-efficacy as the individual level variables. The questionnaire was designed by drawing on proven scales, distributed and valid data were obtained, and SPSS 26.0 software was applied to test the hypotheses of the research model. The empirical results show that perceived severity, perceived vulnerability, response efficacy and self-efficacy all positively influence employees' intention to comply with the information security system, while information security climate across hierarchical levels can have both a direct impact on employees' intention to comply with the information security system and an impact on outcome variables through individual-level variables. The above findings provide some theoretical supports for strengthening enterprise security management.