An Adversarial Dance: Toward an Understanding of Insiders’ Responses to Organizational Information Security Measures

2023 | Journal of the Association for Information Systems | Citations: 0

Authors: Balozian, Puzant; Burns, A.; Leidner, Dorothy

Abstract: Despite the increased focus on organizational security policies and programs, s ... Expand

Abstract: Despite the increased focus on organizational security policies and programs, some employees continue to engage in maladaptive responses to security measures (i.e., behaviors other than those recommended, intended, or prescribed). To help shed light on insiders' adaptive and maladaptive responses to IS security measures, we conducted a case study of an organization at the forefront of security policy initiatives. Drawing on the beliefs-actions-outcomes (BAO) model to analyze our case data, we uncover a potentially nonvirtuous cycle consisting of security-related beliefs, actions, and outcomes, which we refer to as an "adversarial dance." Explaining our results, we describe a novel belief framework that identifies four security belief profiles and uncovers an underexplored outcome of IS security: insiders' lived security experiences. We find that individuals' unfavorable lived security experiences produce counterproductive security-related beliefs that, in turn, lead to maladaptive behaviors. Maladaptive behaviors create new potential for security risk, leading to increased organizational security measures to counter them. Thus, the adversarial dance continues, as the new security measures have the potential to reinforce counterproductive security-related beliefs about the importance and risk of IS security and lead to new maladaptive behaviors. To help situate our findings within the current security literature, we integrate the results with prior research based on extant theories. While this paper is not the first to suggest that security measures can elicit maladaptive behaviors, the emergent belief framework and expanded BAO model of IS security constitute an important contribution to the behavioral IS security literature.Puzant Balozian is an assistant professor of computer information systems at James Madison University. His research focus is primarily on the impacts of organizational factors on individual user behaviors in the context of information security and privacy and addressing security policy compliance and violation. Collapse

Topics: IT security IT security defense productivity IT security threat anonymity

Methods: case study qualitative interview personal interview theory development survey

Theories: information systems theory neutralization theory behavioral theory

Towards More Digital Wellbeing in Knowledge Work - A Signaling Theory Perspective

2023 | HICSS | Citations: 0

Authors: Clausen, Sünje; Braun, Lea-Marie; Stieglitz, Stefan

Abstract: Knowledge workers increasingly rely on information and communication technologie ... Expand

Abstract: Knowledge workers increasingly rely on information and communication technologies (ICT) in their work. If not managed effectively, this shift can reduce workers’ wellbeing and performance. Accordingly, research on corporate digital responsibility (CDR) urges organizations to implement digital wellbeing initiatives to protect workers. In this research, we investigate which digital wellbeing initiatives are offered by organizations, expected by knowledge workers, and whether such initiatives might provide economic returns in the form of improved organizational attractiveness. Based on signaling theory and following a multi-method approach, we identify digital wellbeing initiatives from websites and social media posts of 25 technology companies and conduct semi-structured interviews with 10 students and young professionals. We discuss the conceptualization of digital wellbeing and the role of digital wellbeing for organizational attractiveness. Our findings provide a starting point for investigating business cases for CDR and can advance understanding and implementation of digital wellbeing both in research and practice. Collapse

Topics: website digital literacy knowledge work social media information system use

Methods: qualitative interview qualitative content analysis mixed method leading question personal interview

Theories: signaling theory

DANGEROUS HABIT OR USEFUL ROUTINE? DEVELOPING THEORY-BASED MEASURES FOR THE INTENDED AND UNINTENDED CONSEQUENCES OF STATE-TRACKING HABITS

2023 | European Conference On Information Systems | Citations: 0

Authors: Eichner, Arvid; Lingnau, Nicholas; Felka, Patrick; Kohn, Vanessa; Holten, Roland; Hinz, Oliver

Abstract: According to the theory of IT-mediated state-tracking, the intended and uninten ... Expand

Abstract: According to the theory of IT-mediated state-tracking, the intended and unintended consequences of constantly checking digital devices can be judged by the resulting problem of attention and by whether the checking led to information that served the individual's enduring goal. While this perspective offers numerous benefits over the common practice of labeling excessive information technology use as addiction, as of yet, the constructs of problem of attention (PoA) and service to enduring goal (SEG) lack empirical measures. Thus, this paper develops measurement scales for the constructs PoA and SEG following an established construct development methodology. We evaluate the measures' validity and reliability and demonstrate that PoA and SEG differ from existing similar concepts. With the help of our newly developed constructs the quality of constant checking habits can be assessed which enables future studies to scrutinize the theorized preventive role of self-control in the context of smartphone habits. Collapse

Topics: mobile application unintended consequence smartphone crowdsourcing information system use

Methods: data transformation survey survey design factor analysis exploratory factor analysis

How does e-government use affect citizens’ trust in government? Empirical evidence from China

2023 | Information & Management | Citations: 0

Authors: Li, Yan; Shang, Huping

Abstract: Although much literature has discussed the potential of e-government for improvi ... Expand

Abstract: Although much literature has discussed the potential of e-government for improving citizens’ trust in govern­ ment, the question of how e-government use affects citizens’ trust in government remains underexplored. To investigate the driving mechanism of the effects of different types of e-government use on trust in government, this research develops a conceptual framework based on the institutional-based trust theory, the process-based trust theory, and the expectancy-disconfirmation model. Based on data collected from 1668 citizen users living in five cities in China, the study verifies the proposed mediated moderation model and then tests the robustness of the results using process analysis. The results reveal that citizens’ use of e-government revitalizes their trust in government indirectly, via influence on citizens’ evaluation of government integrity, performance, and responsiveness from the experience of using e-government, while the mediating effects of citizens’ evaluation of government on relationship between e-government use and public trust are diminished by citizens’ expectations for their government. The analysis also offers strong support for the conclusion that the effects of different types of e-government use on public trust are differentially distributed among multiple levels of governments in China. Collapse

Topics: government system website information storage and retrieval system internet technology social capital

Methods: survey descriptive statistic data transformation moderation analysis factor analysis

Theories: trust theory

The Influence of Health Data on the Use of the Electronic Health Record (EHR) – a Mixed Methods Approach

2023 | Americas Conference on Information Systems | Citations: 0

Authors: von Kalckreuth, Niklas; Prümper, Alina; Feufel, Markus

Abstract: The use of electronic health records (EHRs) offers many benefits, but users are ... Expand

Abstract: The use of electronic health records (EHRs) offers many benefits, but users are also critical of them because of concerns about privacy and the sensitivity of health data. Given the ambiguity of data sensitivity, we examine which characteristics of health data influence users' upload behavior, and which are perceived as sensitive. A semi-structured interview (N=30) was conducted to locate characteristics of health data, which influence the user's upload behavior. These characteristics were then empirically evaluated in a user study (N=50). The complexity of diseases and their stigmatization potential are characteristics which influence the uploading behavior. We verify empirically that the uploading of health data is rejected when there is a high potential for stigmatization, while it is accepted when the complexity of the disease increases. Health data are considered by users to have different sensitivities, relative to stigmatization potential. Privacy Calculus regarding EHRs should consider these characteristics of health data. Collapse

Topics: healthcare data mobile application information privacy concern usage intention mobile health

Methods: experiment qualitative interview personal interview survey binomial logistic regression

Theories: privacy calculus theory

Paradoxical Tensions Related to AI-Powered Evaluation Systems in Competitive Sports

2022 | Information Systems Frontiers | Citations: 0

Authors: Mazurova, Elena; Standaert, Willem; Penttinen, Esko; Tan, Felix Ter Chian

Abstract: Judging in competitive sports is prone to errors arising from the inherent limit ... Expand

Abstract: Judging in competitive sports is prone to errors arising from the inherent limitations to humans’ cognitive and sensorial capabilities and from various potential sources of bias that influence judges. Artistic gymnastics offers a case in point: given the complexity of scoring and the ever-increasing speed of athletes’ performance, systems powered by artificial intelligence (AI) seem to promise benefits for the judging process and its outcomes. To characterize today’s human judging process for artistic gymnastics and examine contrasts against an AI-powered system currently being introduced in this context, an in-depth case study analyzed interview data from various stakeholder groups (judges, gymnasts, coaches, federations, technology providers, and fans). This exploratory study unearthed several paradoxical tensions accompanying AI-based evaluations in this setting. The paper identifies and illustrates tensions of this nature related to AI-powered systems’ accuracy, objectivity, explainability, relationship with artistry, interaction with humans, and consistency. Collapse

Topics: artificial intelligence decision making IT skill recommender system human resource management

Methods: qualitative interview case study design artifact theory development qualitative coding

I Left Venus and Came Back to Mars: Temporal Focus Congruence in Dyadic Relationships Following Maternity Leave

2022 | Organization Science | Citations: 0

Authors: Freeney, Yseult; van der Werff, Lisa; Collings, David G.

Abstract: Temporal focus on past, present, and future of contributions to work is critical ... Expand

Abstract: Temporal focus on past, present, and future of contributions to work is critical to understanding how employees and their line managers navigate career disruptions and minimize their potential for negative impact. This paper reframes temporal focus using a dyadic, relational perspective to explore how temporal focus (in)congruence shapes resocialization experiences for returners and their line managers following maternity leave disruption. Our qualitative study draws on 54 interviews across 27 organizations and demonstrates that a congruent, broader temporal focus—that embraces the past, present, and future—is associated with more positive relational and career outcomes than an incongruent focus, where one dyadic partner holds a narrow temporal focus. Our findings explicate how the adoption of a broad versus narrow temporal focus creates a perception of maternity leave as either a brief interlude or a major disruption. A congruent, broader temporal focus allows returners and their line managers to reduce their reliance on typical motherhood biases and instead, consider the woman’s past, present, and potential future contributions over the course of her career. We highlight the importance of temporal focus congruence at a dyadic level and the value of adopting a broader temporal focus on careers while offering new insights regarding the temporal dynamics inherent to maternity leave transitions for both returners and their managers. Collapse

Topics: IT career organizational change organizational context human resource management anonymity

Methods: qualitative interview longitudinal research theory development leading question theoretical contribution

Robotic Process Flexibilization in the Term of Crisis: A Case Study of Robotic Process Automation in a Public Health Department

2022 | European Conference On Information Systems | Citations: 0

Authors: Koch, Julian; Vollenberg, Carolin; Matthies, Benjamin; Coners, André

Abstract: Due to the pandemic, institutions of the health sector, especially public healt ... Expand

Abstract: Due to the pandemic, institutions of the health sector, especially public health departments, are facing major challenges in managing their processes. In a constantly changing environment, new and existing processes have to be adopted or implemented in the shortest possible time, while the process volumes to be managed are constantly increasing. In our article, we use a case study to show how the concept of "flexibility by design" can be influenced by RPA in the sensitive environment of healthcare and how exactly flexibility in process execution can be achieved with it. As a result, we show that RPA can positively implement or enable three of the six realization options from the concept. In addition, the concept was supplemented by two aggregated theoretical dimensions, namely "Response" and "Range," which summarize the supporting conditions for a process flexibilization with RPA. In the article, we thereby show how exactly RPA can complement existing processes in a healthcare environment and thus, serve to subsequently make rigid process models more flexible. Collapse

Topics: information technology infrastructure pandemic extract transform load process business process management robotic process automation

Methods: case study qualitative interview qualitative coding personal interview business process modeling

Enterprise architecture operationalization and institutional pluralism: The case of the Norwegian Hospital sector

2021 | Information Systems Journal | Citations: 18

Authors: Ajer, Anne Kristin Sortehaug; Hustad, Eli; Vassilakopoulou, Polyxeni

Abstract: Enterprise architecture (EA) is a systematic way of designing, planning, and imp ... Expand

Abstract: Enterprise architecture (EA) is a systematic way of designing, planning, and implementing process and technology changes to address the complexity of information system (IS) landscapes. EA is operationalized when architecture visions move towards realization through concrete projects. We report a case study on the dynamics of operationalizing EA in the Norwegian hospital sector by exploring different EA project trajectories. Our empirical context is an institutionally pluralistic setting where multiple logics coexist. We show that the distinct logic of EA is added to the institutional context and we find that tensions among existing medical, technical, and managerial logics and EA principles and assumptions emerge. We contribute to the under-researched topic of EA operationalization by suggesting a model that demonstrates how the meeting of multiple institutional logics can lead to varying degrees of differentiation or even disassociation from EA visions during decision-taking in projects. Furthermore, we advance extant research on IS projects' implementation in institutionally pluralistic settings by providing an empirical account of actors' interactions and project leadership arrangements that contribute to the persistence of coexisting logics in a dynamic equilibrium. Collapse

Topics: IT professionalism IT project project management service quality spreadsheet

Methods: qualitative interview case study personal interview literature study theory development

Theories: dominant logic

Combining Graph Exploration and Fragmentation for Scalable RDF Query Processing

2021 | Information Systems Frontiers | Citations: 0

Authors: Khelil, Abdallah; Mesmoudi, Amin; Galicia, Jorge; Bellatreche, Ladjel; Hacid, Mohand-Saïd; Coquery, Emmanuel

Abstract: The flexibility offered by the Resource Description Framework (RDF) has led it t ... Expand

Abstract: The flexibility offered by the Resource Description Framework (RDF) has led it to become a very popular standard for representing data with an undefined or variable schema using the concept of triples. Its success has resulted in many large scale multidisciplinary datasets, that have prompted the development of efficient RDF processing systems. Current approaches can be distinguished into two groups: the first, adopting the relational model storing the triples in tables, and the second creating data structures that model RDF data as a graph. The strategies of the first group are more easily scalable since they apply optimization strategies from the relational model like indexing and fragmentation. However, these approaches suffer many overheads when dealing with complex queries (e.g. compounded SPARQL graphs involving filters) persistent in existing applications. On the other hand, graph-based systems that use more complex data structures fail to efficiently manage the main memory and are not scalable in computer hardware with limited resources. In this paper, we propose a novel approach to perform queries (Basic Graph Patterns, Wildcards, Aggregations and Sorting) on RDF data. We propose to combine both RDF graph exploration with physical fragmentation of triples. In this work, we describe our graph-based storage and query evaluation models. Then, we detail the architecture of our system and we largely explain the strategy, based in the Volcano execution model, used to manage the main memory at query runtime. We conducted extensive experiments on synthetic and real datasets to evaluate the efficiency of our proposal. We compared our performance with a relational-based (Virtuoso), a graph-based (gStore) and an intensive-indexing (RDF-3X) approach. According to our evaluation, our system offers the best compromise between efficient query processing and scalability. Collapse

Topics: computer hardware Neo4j graph database structured query language database system

Methods: experiment computational algorithm leading question literature study