Organizations face many cybersecurity threats. Among those threats, social engineering attacks such as phishing stand out as a constant and costly struggle. The primary tools for combating social engineering are information security policy (ISP) and security awareness training (SAT), which seek to inform users of the threat of social engineering, how to detect social engineering, and how to respond with protective measures. However, ISPs only effectively combat social engineering when users comply with the policies. Furthermore, based on the theory of planned behavior, user compliance behavior only occurs if the user intends to comply. Since social engineering is still a significant and growing threat, many researchers are interested in understanding why defensive measures are falling short. These shortcomings can have grave consequences for aerospace organizations, commercial airlines, and airports. In this quantitative, correlational study, I seek to determine if a relationship exists between security education and ISP compliance intention among aerospace information technology professionals in the United States. I collected survey responses from 84 participants and used linear regression to determine the relationship between the constructs. The research results show that security education strongly correlates with ISP compliance intention. This finding highlights that security education is a critical aspect of responding to the threat of social engineering for aerospace organizations in the United States. Furthermore, the study shows that adopting appropriate security education could be valuable if an organization needs help with user policy compliance. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://bibliotheek.ehb.be:2222/en-US/products/dissertations/individuals.shtml.]