Results

Found 3 articles

Clear filters

Motivating information security policy compliance: The critical role of supervisor-subordinate guanxi and organizational commitment
PDF
2020 | International Journal of Information Management | Citations: 0
Authors: Liu, Chenhui; Wang, Nengmin; Liang, Huigang

Abstract: Employees’ non-compliance with organizational information security policy (ISP) ... Expand

Abstract: Employees’ non-compliance with organizational information security policy (ISP) when using informational resources has become the main reason for continuous security incidents. Drawing upon technology threat avoidance theory (TTAT) and social exchange theory (SET), our study investigates the influence of supervisorsubordinate guanxi (SSG) and organizational commitment in the information security management. Our hypotheses were tested using survey data from 235 Chinese government employees. Results not only confirm the direct effect of SSG on government employees’ ISP compliance but also suggest that SSG indirectly influences compliance behavior via the mediation of organizational commitment. Organizational commitment weakens the negative influence of perceived costs on compliance behavior and also weakens the positive effect of self-efficacy on employees’ ISP compliance. For low-commitment employees, the negative influence of perceived costs on compliance behavior is more significant than that of those with strong organizational commitment, and selfefficacy exerts a stronger effect on ISP compliance for low-commitment employees than it does for high-commitment employees. This study contributes to current literature on information systems (IS) by confirming the critical roles of SSG and organizational commitment in motivating employees’ compliance behavior. Collapse

Semantic filters: technology threat avoidance theory variance theory

Topics: organizational commitment self efficacy information management IT security information security management

Methods: survey partial least squares regression descriptive statistic data transformation statistical hypothesis test

Theories: social psychology theory social exchange theory technology threat avoidance theory
Definition and Multidimensionality of Security Awareness: Close Encounters of the Second Order
PDF
2018 | ACM SIGMIS Database | Citations: 1
Authors: Hanus, Bartlomiej; Windsor, John C.; Wu, Yu

Abstract: This study proposes and examines a multidimensional definition of information se ... Expand

Abstract: This study proposes and examines a multidimensional definition of information security awareness. We also investigate its antecedents and analyze its effects on compliance with organizational information security policies. The above research goals are tested through the theoretical lens of technology threat avoidance theory and protection motivation theory. Information security awareness is defined as a second-order construct composed of the elements of threat and coping appraisals supplemented by the responsibilities construct to account for organizational environment. The study was executed in two stages. First, the participants (employees of a municipality) were exposed to a series of phishing messages. Second, the same individuals were asked to participate in a survey designed to examine their security awareness. The research model was tested using PLS-SEM approach. The results indicate that security awareness is in fact a second-order formative construct composed of six components. There are significant differences in security awareness levels between the victims of the phishing experiment and the employees who maintain compliance with security policies. Our study extends the theory by proposing and validating a general, yet practical definition of security awareness. It also bridges the gap between theory and practice - our contextualization of security awareness draws heavily on both fields. Collapse

Semantic filters: technology threat avoidance theory variance theory

Topics: phishing data security behavioral intention security policy electronic mail

Methods: survey survey design statistical power analysis partial least squares path modeling partial least squares regression

Theories: technology threat avoidance theory protection motivation theory motivation theory
Avoidance of Information Technology Threats: A Theoretical Perspective

2009 | Management Information Systems Quarterly | Citations: 368
Authors: Liang, Huigang; Xue, Yajiong

Abstract: This paper describes the development of the technology threat avoidance theory ( ... Expand

Abstract: This paper describes the development of the technology threat avoidance theory (TTAT), which explains individual IT users' behavior of avoiding the threat of malicious information technologies. We articulate that avoidance and adoption are two qualitatively different phenomena and contend that technology acceptance theories provide a valuable, but incomplete, understanding of users' IT threat avoidance behavior. Drawing from cybernetic theory and coping theory, TTAT delineates the avoidance behavior as a dynamic positive feedback loop in which users go through two cognitive processes, threat appraisal and coping appraisal, to decide how to cope with IT threats. In the threat appraisal, users will perceive an IT threat if they believe that they are susceptible to malicious IT and that the negative consequences are severe. The threat perception leads to coping appraisal, in which users assess the degree to which the IT threat can be avoided by taking safeguarding measures based on perceived effectiveness and costs of the safeguarding measure and self-efficacy of taking the safeguarding measure. TTAT posits that users are motivated to avoid malicious IT when they perceive a threat and believe that the threat is avoidable by taking safeguarding measures; if users believe that the threat cannot be fully avoided by taking safeguarding measures, they would engage in emotion-focused coping. Integrating process theory and variance theory, TTAT enhances our understanding of human behavior under IT threats and makes an important contribution to IT security research and practice. Collapse

Semantic filters: technology threat avoidance theory variance theory

Topics: self efficacy IT security information security practice technology adoption social influence

Methods: theory development

Theories: technology threat avoidance theory protection motivation theory psychological theory technology acceptance model technology acceptance theory

Page 1 of 1

AIS11

Journals

Conferences

Semantic Filter

Found 3 articles

Motivating information security policy compliance: The critical role of supervisor-subordinate guanxi and organizational commitment

Definition and Multidimensionality of Security Awareness: Close Encounters of the Second Order

Avoidance of Information Technology Threats: A Theoretical Perspective