Results

Found 3 articles

Clear filters

The role of cybersecurity and policy awareness in shifting employee compliance attitudes: Building supply chain capabilities
PDF
2022 | International Journal of Information Management | Citations: 1
Authors: Wong, Lai-Wan; Lee, Voon-Hsien; Tan, Garry Wei-Han; Ooi, Keng-Boon; Sohal, Amrik

Abstract: This paper investigates the role of general cybersecurity and cybersecurity poli ... Expand

Abstract: This paper investigates the role of general cybersecurity and cybersecurity policy awareness in enhancing supply chain cyber resilience reactive capabilities. Theorizing from the Protection Motivation Theory, 200 Small and Medium Enterprises (SMEs) were contacted to understand their perception of cybersecurity and policy awareness in affecting their overall cybersecurity hygiene. Data collection was carried out using a questionnaire survey and analysed via Partial Least Squares-based Structural Equation Modelling to validate the research framework. Results of analysis outlined the importance of general cybersecurity and policy awareness in shifting employees’ compliance attitude towards enhancing supply chain reactive capability. Using a mixed-method approach, postsurvey interviews were further conducted with practitioners in SMEs to understand the study findings. The implications outlined in this study emphasises the importance of prioritising preventive measures and proper employee cyber hygiene to address the risk and loss following a cyber-attack. Key supply chain operational areas in SMEs are still largely supported by the human workforce serving as its backbone. An unwarranted attack could cause adverse business impacts. Thus, practitioners and SMEs would be alerted to the critical need for a robust security posture and that SMEs’ need of the hour lies at the core of its policy and employee cybersecurity hygiene. Collapse

Semantic filters: psychological ownership cybersecurity awareness

Topics: IT security cybersecurity awareness supply chain management self efficacy pandemic

Methods: qualitative interview survey conceptual modelling factor analysis partial least squares regression

Theories: protection motivation theory work systems theory
Towards Designing A Method To Create Sticky Information Security Training For SMEs: Identifying Design Factors

2021 | European Conference On Information Systems | Citations: 2
Authors: Brehmer, Martin; Abbas, Antragama Ewa; Vaidyanathan, Nageswaran

Abstract: The risk of being impacted by a cyberattack is high, because of more profession ... Expand

Abstract: The risk of being impacted by a cyberattack is high, because of more professional attacks. Thereby, cyber criminals are bypassing technological countermeasures through tricking users. Recently collected data during the SARS-CoV-2 pandemic demonstrate, that cyberattacks including social engineering are among the main threats, especially for Small and Medium-sized Enterprises (SME). (Information) Security Education and Training Awareness (SETA) is proposed to be an effective countermeasure. However, the effects of SETA fade rapidly over time and learnings are not applied in practice sustainably. Thus, we state that a method is required to create SETA programs with sustainable learning outcomes for SME. To develop such a method, we follow the Design Science Research Methodology and share insights of our first design cycle in this article. We conducted a literature review and analyzed factors of failure and success regarding the design of sustainable SETA programs. Furthermore, we sketch our plans for design cycle 2. Collapse

Semantic filters: psychological ownership cybersecurity awareness

Topics: database system psychological ownership evaluation criteria email phishing IT security

Methods: design science literature study design requirement literature sample longitudinal research

Theories: flow theory protection motivation theory
When Colleagues Fail: Examining the Role of Information Security Awareness on Extra-Role Security Behaviors

2018 | European Conference On Information Systems | Citations: 0
Authors: Jaeger, Lennart; Eckhardt, Andreas

Abstract: Although prior information security research predominantly focuses on organizati ... Expand

Abstract: Although prior information security research predominantly focuses on organizational in-role security behaviors (e.g., information security policy (ISP) compliance), the role of extra-role security behaviors – secure actions unspecified in ISPs but beneficial to organizations – has not seen nearly as much attention. At the same time, employees’ awareness manifests itself as prerequisite for security behavior but without research having really understood all of its potential impacts. Therefore this study examines the role of information security awareness (ISA) in enhancing extra-role security behaviors in addition to in-role security behaviors. In particular, we propose that general ISA enhances promotive extra-role security behaviors (i.e., helping and voice) and ISP awareness fosters prohibitive extra-role security behaviors (i.e., stewardship and whistle-blowing). Data was collected from a field study, where employees responded to incoming emails from co-workers and supervisors asking for password sharing, unsafe data sharing via private emails, as well as the use of private cloud services and unauthorized software. Our findings show that general ISA and ISP awareness are indeed driving both inrole and extra-role security behaviors. We discuss our implications for theory and practice, and conclude with interesting avenues for further research. Collapse

Semantic filters: psychological ownership cybersecurity awareness

Topics: electronic mail data security top management support privacy cybersecurity awareness

Methods: field study partial least squares regression triangulation post-hoc analysis partial least squares path modeling

Theories: big five model

Page 1 of 1

AIS11

Journals

Conferences

Semantic Filter

Found 3 articles

The role of cybersecurity and policy awareness in shifting employee compliance attitudes: Building supply chain capabilities

Towards Designing A Method To Create Sticky Information Security Training For SMEs: Identifying Design Factors

When Colleagues Fail: Examining the Role of Information Security Awareness on Extra-Role Security Behaviors