Gender difference and employees' cybersecurity behaviors

Anwar, Mohd; He, Wu; Ash, Ivan K.; Yuan, Xiaohong; Li, Ling; Xu, Li Da

doi:10.1016/j.chb.2016.12.040

Cited by 225 publications

(175 citation statements)

References 26 publications

Supporting

Mentioning

154

Contrasting

Unclassified

Order By: Relevance

“…In the same report, one of the key concerns raised was the growing threat from individuals within the organization, or the so called 'insider threat'. This latter point is mirrored by an apparent realization by researchers within the information security community that, for the most part, the weakest element in the cybersecurity chain is that of the human (Anwar et al, 2016;Nurse, Creese, Goldsmith, & Lamberts, 2011;Sasse, Brostoff, & Weirich, 2001;Sasse & Flechais, 2005).…”

Section: Introductionmentioning

confidence: 99%

The “Human Factor” in Cybersecurity

Hadlington

2018

Advances in Digital Crime, Forensics, and Cyber Terrorism

View full text Add to dashboard Cite

A great deal of research has been devoted to the exploration and categorization of threats posed from malicious attacks from current employees who are disgruntled with the organisation, or are motivated by financial gain. These so-called "insider threats" pose a growing menace to information security, but given the right mechanisms, they have the potential to be detected and caught. In contrast, human factors related to aspects of poor planning, lack of attention to detail, and ignorance are linked to the rise of the accidental or unintentional insider. In this instance there is no malicious intent and no prior planning for their "attack," but their actions can be equally as damaging and disruptive to the organisation. This chapter presents an exploration of fundamental human factors that could contribute to an individual becoming an unintentional threat. Furthermore, key frameworks for designing mitigations for such threats are also presented, alongside suggestions for future research in this area.

show abstract

Section: Introductionmentioning

confidence: 99%

The “Human Factor” in Cybersecurity

Hadlington

2018

Advances in Digital Crime, Forensics, and Cyber Terrorism

View full text Add to dashboard Cite

show abstract

“…The current study utilizes the OSBBQ, a self-report, Likert-scaled questionnaire consisting of 75 items assessing multiple domains of information security and associated behaviors. 10,11,14 Participants completed the questionnaire by responding to all 75 items, and the researchers score the questionnaire, with each question being scored within its individual construct to create subscale scores for each of the 13 distinct constructs ( Table 1). Initially developed for use in a corporate or workplace setting, minor changes in wording were implemented (i.e., changing ''organization'' to ''university'') to facilitate relevance to typical college students who are unlikely to have experience in corporate or workplace environments.…”

Section: Methodsmentioning

confidence: 99%

“…The OSBBQ is based on two theoretical frameworks: (a) the Health Belief Model and (b) the Protection Motivation Theory. 11 According to the previous research, the OSBBQ can be separated into multiple factors, each of which assess different manifest constructs within the latent constructs of online security behaviors and online security beliefs. 10,11,14 As a result, the OSBBQ is able to provide more information than other assessments, and allows its users to assess various aspects, of online security beliefs and behaviors.…”

Section: Methodsmentioning

confidence: 99%

“…10 Recent research has indicated that, more specifically, this questionnaire assesses 13 different factors/constructs within cybersecurity attitudes, beliefs, and behaviors ( Table 1). This questionnaire was conceptualized based on the Health Belief Model, which examines preventative health behaviors undertaken to detect and prevent future disease, 11,12 and Protection Motivation Theory, which outlines three components of fear appeal that drive cognitive appraisal and behavioral change: magnitude of an event, the probability of the event's occurrence, and the efficacy of a protective action. 11,13 Using these two conceptual frameworks, the OSBBQ provides a comprehensive assessment of attitudes, beliefs, and behaviors surrounding both proactive and retroactive cybersecurity best practices.…”

Section: Online Security Behaviors and Beliefs Questionnairementioning

confidence: 99%

See 1 more Smart Citation

Validation of the Online Security Behaviors and Beliefs Questionnaire with College Students in the United States

Schaffer

Debb

2019

Cyberpsychology, Behavior, and Social Networking

View full text Add to dashboard Cite

The Online Security Behaviors and Beliefs Questionnaire is a 75-item self-report inventory assessing awareness, attitudes, behaviors, and beliefs toward various aspects of cybersecurity best practices. The questionnaire was originally constructed and validated for use with adult employees in corporate settings, with the measure assessing 13 latent constructs. The goal of this study was to adapt the questionnaire to implement it with a college sample and examine if the identified factor structure for use with this population. Data were collected from 735 students at two public universities in the Southeastern region of Virginia, 676 of whom were retained for analyses. Confirmatory factor analysis using the means and variances adjusted weighted least squares method was conducted using Mplus 8.1 to assess goodness of model fit. The 13-factor model failed to meet criteria for exact or approximate model fit: v 2 (2701) = 44569.85, p < 0.001; root mean square error of approximation = 0.07, 95 percent confidence interval [0.06-0.07]; confirmatory fit index = 0.86; Tucker Lewis index = 0.85. The results suggest significant differences between cybersecurity awareness, attitudes, and beliefs between the corporate workplace and college student populations that ultimately influenced the reliability and validity of the questionnaire when adapted for use with college students in the United States. It is also possible that the theoretical underpinnings of this questionnaire may not apply, or they may apply differently, in this sample of predominantly African American and Caucasian students.

show abstract

“…According to the latest reports; total number, type and sophistication cyber security threats level to information systems are boosting. Motivations of these attacks are varied, but attackers deploy malicious activities even if they do not think the information held on the target systems is valuable [7], [8].…”

Section: Introductionmentioning

confidence: 99%

Numerical and Statistical Analysis on Information Security Using R: Interoperability Perspective

Goztepe¹

2017

IJCSDF

View full text Add to dashboard Cite

Over the past two decades, information and communication technology (ICT) have gained enormous effect on social-business life more than ever. ICT has become increasingly important not only for life but also national security. Interoperability among ICTs is also a vital topic to support national security. The term "interoperability" covers a nation's information telecommunication networks, critical infrastructures, intelligence and military systems which are all vulnerable to growing number of cyber-attacks from inside and outside. The purpose of this study is to examine and statistically analyze the importance of interoperability applying cost, cyber espionage (CE), cyber warfare (CW), hacktivism (HA) and cyber-crime (CC) criteria based on available information about cyber-attacks to governmental organizations or critical infrastructure. For this goal, obtained dataset from opensource has been analyzed. Firstly, Shapiro-Wilk and AndersonDarling is applied for checking normality of the data. After this, a regression model is developed to see the relation between cost and cyber-attacks types. The results have shown that cyber-attacks affect interoperability environment and cause losing great financial resources. Thus, not only governments but also business world should pay more attention to develop advanced security integration models.

show abstract

Gender difference and employees' cybersecurity behaviors

Cited by 225 publications

References 26 publications

The “Human Factor” in Cybersecurity

The “Human Factor” in Cybersecurity

Validation of the Online Security Behaviors and Beliefs Questionnaire with College Students in the United States

Numerical and Statistical Analysis on Information Security Using R: Interoperability Perspective

Contact Info

Product

Resources

About