From Groups to Communities: A Resource Mobilization Theory Perspective on the Emergence of Communities

2023 | Information Systems Frontiers | Citations: 1

Authors: Angelopoulos, Spyros; Canhilal, Kubra S.; Hawkins, Matthew A.

Abstract: Groups and communities have been key topics in the information systems (IS) rese ... Expand

Abstract: Groups and communities have been key topics in the information systems (IS) research agenda. While communities are assumed to emerge at the intersection of overlapping groups and their practices, prior research has mainly focused on their dynamics and evolution. This has resulted to limited empirical support regarding the emergence of communities. We address that lacuna by tracing the emergence of communities through the prism of resource mobilization theory. In doing so, we make use of a unique longitudinal dataset and incorporate Topic Modelling, Bipartite Network Analysis, and Community Detection. We show that new communities are formed at the intersection of overlapping groups and practices. In addition, we contribute to the IS literature by demonstrating that their emergence occurs due to resource mobilization that gives rise to a shared mindset. We also reveal that multiple resources are incorporated into the practices of an emerging community. By combining large datasets and innovative computational approaches, we help IS theory and practice to move away from traditional "what" questions towards the more insightful "how" ones. We discuss the theoretical and practical implications of our work and delineate an agenda for future research on the topic. Collapse

Topics: accounting identity theft database system

Methods: longitudinal research theoretical contribution theory development network analysis topic model

Theories: information systems theory

Towards a thematic dimensional framework of online fraud: An exploration of fraudulent email attack tactics and intentions

2023 | Decision Support Systems | Citations: 1

Authors: Bera, Debalina; Ogbanufe, Obi; Kim, Dan J.

Abstract: Despite anti-phishing filters, social engineering-based cyber-attacks still resu ... Expand

Abstract: Despite anti-phishing filters, social engineering-based cyber-attacks still result in billions of dollars lost annually, significant personal identity theft, loss of corporate secrets, and espionage. We review the phishing literature on psychological attacks and design tactics employed for deception by attackers. The result reveals the need to continuously identify tactics embedded in fraudulent email content to understand why users still fall prey to phishing attacks. Using the literature as a backdrop, we identify and conceptualize a thematic dimensional framework of fraudulent phishing attacks. This study uses benchmark datasets of fraudulent email to empirically validate the proposed dimensional framework. Specifically, a combination of machine learning-based content analysis and topic modeling found a majority of the discovered topics were labeled against the proposed di­ mensions. Statistical analysis was employed to provide empirical evidence of the thematic dimensions of fraudulent email attacks. This study thus, not only extends the cybersecurity literature by identifying and vali­ dating eight dimensions that enrich our understanding of phishing and attack identification but stimulates cu­ mulative research endeavors to develop yet more comprehensive dimensional frameworks of phishing email attacks. Collapse

Topics: phishing email phishing electronic mail email spam personalization

Methods: term frequency–inverse document frequency natural language processing topic model discriminant analysis literature study

Unraveling the behavioral influence of social media on phishing susceptibility: A Personality-Habit-Information Processing model

2023 | Information & Management | Citations: 0

Authors: Frauenstein, Edwin Donald; Flowerday, Stephen; Mishi, Syden; Warkentin, Merrill

Abstract: Frequent and habitual engagement with social media can reinforce certain activit ... Expand

Abstract: Frequent and habitual engagement with social media can reinforce certain activities such as sharing, clicking hyperlinks, and liking, which may be performed with insufficient cognition. In this study, we aimed to examine the associations between personality traits, habits, and information processing to identify social media users who are susceptible to phishing attacks. Our experimental data consisted of 215 social media users. The results revealed two important findings. First, users who scored high on the personality traits of extraversion, agree­ ableness, and neuroticism were more likely to engage in habitual behaviors that increase their susceptibility to phishing attacks, whereas those who scored high on conscientiousness were less likely. Second, users who habitually react to social media posts were more likely to apply heuristic processing, making them more sus­ ceptible to phishing attacks than those who applied systematic processing. Collapse

Topics: phishing Facebook personality social media electronic mail

Methods: survey structural equation modeling survey design theory development self reported survey

Theories: big five model Maslow motivation theory uses and gratifications theory technology acceptance model theory of planned behavior

Customer Complaints Response Priority Recommendation Engine: A HYBRID NLP Model

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Marshan, Alaa; Joshi, Nikhil; Ioannou, Athina; Spanaki, Konstantina

Abstract: The Consumer Financial Protection Bureau (CFPB) receives and processes consumer ... Expand

Abstract: The Consumer Financial Protection Bureau (CFPB) receives and processes consumer complaints about various financial services. Every complaint provides insight into problems that consumers experience. With an increasing number of CFPB complaints, manual prioritisation of these complaints is not feasible. This paper proposes a smart approach based on latent Dirichlet allocation (LDA) and Emotion detection to analyse the CFPB consumer complaints, extracting latent topics and emotions from CFPB complaints and assigning priority based on a predefined priority matrix. The automated priority recommendation engine provides faster and optimum prioritisation. The use of emotion detection and LDA allows categorization of complaints using two distinct aspects, topic, and emotion, providing varied priorities for the complaints. The average weighted priority calculation based on topics and emotions allows the recommendation engine to remove the dependence of prioritisation systems on user-selected labels. The proposed approach allows a configurable matrix, making the system implementation easy to configure as per business requirements. Collapse

Topics: Python missing data recommender system customer satisfaction website

Methods: topic model Cross-Industry Standard Process for Data Mining latent dirichlet allocation natural language processing cluster analysis

PUBLIC MANAGEMENT CHALLENGES IN THE DIGITAL RISK SOCIETY: A Critical Analysis of the Public Debate on Implementation of the Danish NemID

2023 | European Journal of Information Systems | Citations: 0

Authors: Ngwenyama, Ojelanki; Henriksen, Helle Zinner; Hardt, Daniel

Abstract: The rise of the digital society is accompanied by incalculable social risks, but ... Expand

Abstract: The rise of the digital society is accompanied by incalculable social risks, but very little IS research has examined the implications of the new digital society. Drawing on concepts from Beck’s critical theory of the risk society and critical discourse analysis, this study examines the public discourse on risk events during the launch of NemID, a personal digital identifier for Danish citizens. This research illustrates our difficulties and challenges in managing some of the fundamental social risks from societal digitalisation. Limited institutional capabilities for digital technologies force public officials to depend on private companies motived by profit instead of the public interest. Beliefs in digital technology as the primary determinant of social and economic progress also present many public management dilemmas. When digital risk events occur and citizens’ fears are stoked by news media and public discourse, public officials seem to have no other strategy for managing the escalating fears than systematically distorted communication. The continued rise of the digital risk society demands that IS research respond to the challenge of generating knowledge for its public management. Collapse

Topics: IT risk management data breach identity theft denial of service attack internet technology

Methods: theory development case study qualitative content analysis cluster analysis design artifact

Theories: theory of information warfare theory of communicative action

The Application of Role-Based Framework in Preventing Internal Identity Theft Related Crimes: A Qualitative Case Study of UK Retail Companies

2023 | Information Systems Frontiers | Citations: 0

Authors: Okeke, Romanus Izuchukwu; Eiza, Max Hashem

Abstract: This paper aims to examine the challenges of preventing internal identity theft ... Expand

Abstract: This paper aims to examine the challenges of preventing internal identity theft related crimes (IIDTRC) in the UK retail sector. Using an in-depth multiple case studies of a selected number of cross-functional management teams in the UK retail companies, management roles were analysed. We used semi-structured interview as a qualitative data collection technique and used Nvivo aided thematic analysis and interpretivism underpinned by Role-Based Framework (RBF) for analysis. Our findings revealed that vagueness of roles and lack of clarity in sharing data security responsibilities are the major challenges of preventing IIDTRC in UK retail companies. We suggest an application of RBF which provides a conceptual analysis for cross-functional management team to address the challenges of preventing IIDTRC. RBF enables clarity of shared roles where both information security and crimes prevention teams work in unison is required to prevent IIDTRC to maximise internal data security. Contributions for policymakers are offered in this paper. Collapse

Topics: criminality data security IT security outsourcing IT security threat

Methods: case study qualitative interview personal interview survey qualitative content analysis

Theories: organizational role theory

Information Technology Innovativeness and Data-Breach Risk: A Longitudinal Study

2023 | Journal of Management Information Systems | Citations: 0

Authors: Wang, Qian; Ngai, Eric W. T.; Pienta, Daniel; Thatcher, Jason Bennett

Abstract: The adoption of new Information Technology (IT) innovations has led to increased ... Expand

Abstract: The adoption of new Information Technology (IT) innovations has led to increased uncertainty among employees, a greater demand for security measures, and more entry points for cyber-attacks, which all increase the risk of data breaches for firms. Despite the prevalence of discussions around this issue, there has been a lack of empirical research examining the data breach risk associated with IT innovations. To address this gap, we have developed arguments based on an organizational learning theoretical framework that explains how IT innovativeness can exacerbate data breach risk. Through our analysis of a sample of data breaches that occurred between 2013 and 2021, we have discovered that there is a positive association between firm IT innovativeness and the risk of data breaches. We also find that the effects of IT innovativeness can vary under certain conditions. For example, we find that the positive relationship between IT innovativeness and data breach risk is mitigated when managers possess IT expertise or when firms have established extensive board connections with cybersecurity managers. Moreover, we find that the relationship between IT innovativeness and data breach risk is amplified in complex environments but not in dynamic or munificent ones. This study takes the lead in advancing the theoretical understanding and empirical validation of security-related risks associated with IT innovations. Moreover, our findings serve as a timely reminder for research and practice to carefully consider the implications of introducing novel technologies into firms and the potential dark side consequences that may arise. Additionally, this study underscores the importance of understanding organizational learning in risk assessment and change management, as well as the critical role of contextual factors in moderating the unintended security-related consequences linked to IT innovations. Collapse

Topics: data breach digital innovation IT security data security organization learning

Methods: robustness check descriptive statistic propensity score method cluster analysis two sample t-test with equal variance

Theories: organizational learning theory

PREPARING FOR CYBERATTACKS: A CASE STUDY OF RESILIENCE IN THE HEALTH-CARE SECTOR

2023 | European Conference On Information Systems | Citations: 0

Authors: Weber, Manuel; Hacker, Janine; Karintaus, Laura; Pekkola, Samuli; Brocke, Jan vom; Ylinen, Maija

Abstract: Nowadays, health-care organizations rely extensively on information technology ... Expand

Abstract: Nowadays, health-care organizations rely extensively on information technology and systems for providing high-quality services to their patients and exchanging data with external partners. However, these organizations, processes, and operations are vulnerable to criminal activities and digital security breaches, which has led health-care organizations to build various protection mechanisms, including firewalls, virus scanners, and security policies that enhance their ability to prepare for threats; design activities to be conducted during a cyberattack; and implement means to recover from an unfortunate event. Although these moves have been acknowledged in research and in practice, there is still little knowledge available on how organizations understand and perceive such events as well as their consequences. To this end, we conducted a qualitative case study that included 14 interviews with diverse key actors at a Finnish hospital. From them, we aimed to understand how the organization has prepared for cyberattack resilience. By generalizing our case research, we built a framework for analyzing and improving organizational resilience. This framework makes significant contributions both to theory and practice. Collapse

Topics: IS management emergency management business continuity planning business process management identity theft

Methods: qualitative interview case study single case study multiple case study personal interview

The good, the bad, and the ugly: impact of analytics and artificial intelligence-enabled personal information collection on privacy and participation in ridesharing

2022 | European Journal of Information Systems | Citations: 0

Authors: Cheng, Xusen; Su, Linlin; Luo, Xin (Robert); Benitez, Jose; Cai, Shun

Abstract: Big data analytics (BDA) and artificial intelligence (AI) may provide both brigh ... Expand

Abstract: Big data analytics (BDA) and artificial intelligence (AI) may provide both bright and dark sides that may affect user participation in ridesharing. We do not know whether the juxtaposed sides of these IT artefacts influence users’ cognitive appraisals, and if so, to what extent will their participative behaviour be affected. This paper contributes to the IS research by uncovering the interplay between the dark and bright sides of BDA and AI and the underlying mechanisms of cognitive appraisals for user behaviour in ridesharing. We performed two phases of the study using mixed-methods. In the first study, we conduct 21 semi-structured interviews to develop the research model. The second study empirically validated the research model using survey data of 332 passengers. We find that the usage of BDA and AI on ridesharing platforms have a bright side (usefulness, “the good”) but also a dark side (uncertainty and invasion of privacy, “the bad and the ugly”). The bright side generates perceived benefits, and the dark side shape perceived risks in users, which discount the risks from the benefits of using the ridesharing platform. Privacy control exerts a positive effect on the perceived benefits to encourage individuals to use the ridesharing platform. Collapse

Topics: ride sharing platform privacy artificial intelligence systems implementation biometric

Methods: qualitative interview survey mixed method personal interview mediation analysis

Theories: privacy calculus theory information systems theory

Weaponizing the GDPR: How Flawed Implementations Turn the Gold Standard for Privacy Laws into Fool's Gold

2022 | International Conference on Information Systems | Citations: 0

Authors: Gladis, Alexander; Hartwich, Nicole; Salge, Oliver

Abstract: Despite its ambitious goals of protecting personal data and generally being wel ... Expand

Abstract: Despite its ambitious goals of protecting personal data and generally being well-received, the General Data Protection Regulation (GDPR) can be exploited for identity theft by weaponizing subject access requests (SARs). To understand this threat and investigate the impact of victims' privacy awareness and public exposure on its effectiveness, we selected three victims -highly privacy aware person, average user, and semipublic figureand tasked six realistic attackers with stealing their personal data. Based on 718 submitted SARs, we provide novel insights from a realistic case study of a law being weaponized and advance the understanding of GDPR-based identity theft by demonstrating its practical viability. Further, we derive patterns from common flaws observed in SAR handling processes, and explore threat mitigation options for individuals, organizations, and lawmakers. Generalizing our findings, we uncover approaches for cybersecurity researchers to probe further laws for flaws. Collapse

Topics: identity theft privacy electronic mail IT security legal context

Methods: case study archival research simulation multiple case study