Instruction: Imagine a scenario where a new IT policy purportedly improves overall system security. Propose a mediation model to investigate whether employee compliance mediates this relationship, and describe how you would test this model.
Context: This question assesses the candidate's understanding of mediation analysis, a statistical method used to understand the mechanism through which a causal effect operates. Candidates need to outline a suitable mediation model, specify the direct and indirect effects, and explain how they would statistically test the significance of the mediated effect.