Managing the introduction of information security awareness programmes in organisations

Tsohou, Aggeliki; Karyda, Maria; Kokolakis, Spyros; Kiountouzis, Evangelos

doi:10.1057/ejis.2013.27

Cited by 79 publications

(56 citation statements)

References 41 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Previous results showed positive effects [17,30]. An explanation may refer to other environmental or contextual factors to explain this result [16,24,33]. Besides, perceived severity has a significant positive effect on intention, thereby supporting H2.…”

Section: Discussion Of the Resultssupporting

confidence: 57%

“…The aim of ISA programs is to increase employees' ISA concerning current information security threats and risks by delivering the content of the ISP to banks' employees [5,33]. In practice, ISA programs vary from bank to bank and different methods are used to make their employees more aware [4,5].…”

Section: The Effects Of Isa Programs On Employees' Protection Motivationmentioning

confidence: 99%

See 1 more Smart Citation

The Effects of Awareness Programs on Information Security in Banks: The Roles of Protection Motivation and Monitoring

Bauer

Bernroider

2015

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. Our aim is to understand how information security awareness (ISA) programs affect the intention of employees for compliant information security behavior. We draw on Protection Motivation Theory (PMT) to uncover indirect influences of ISA programs, and seek to identify the extent to which intention translates into actual compliance is contingent on monitoring. Based on partial least squares structural equation modeling analysis of 183 survey responses consisting of German bank employees, we find strong empirical evidence for the importance of ISA programs, protection motivation and monitoring. While ISA programs effectively change how employees cope with and assess security threats, only coping appraisal is an important condition for the positive behavioral effects of such programs to occur. However, ISA programs may cause a false sense of security, as vulnerability perceptions are reduced by consuming ISA programs but not affecting intentions for compliant security behavior. Perceived monitoring strengthens this confirmed intention-behavior link.

show abstract

Section: Discussion Of the Resultssupporting

confidence: 57%

Section: The Effects Of Isa Programs On Employees' Protection Motivationmentioning

confidence: 99%

The Effects of Awareness Programs on Information Security in Banks: The Roles of Protection Motivation and Monitoring

Bauer

Bernroider

2015

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

“…This indicates that variations in intentions may be further explained by other factors beyond what the three TPB predictors (i.e., attitude, subjective norms and perceived behavioral control) have accounted for. Tsohou, Karyda, Kokolakis, and Kiountouzis [5], Wang, Gupta and Rao [67], and…”

Section: Antecedents Influencing Dysfunctional Behavioral Intentionmentioning

confidence: 99%

“…They have a dual role in information security systems, both as allies and as a source of threats [5]. Studies have suggested that within the information security chain, insiders remain the weakest link in the effort to secure organizational IS assets [2,3,6,7].…”

Section: Introductionmentioning

confidence: 99%

Dysfunctional information system behaviors are not all created the same: Challenges to the generalizability of security-based research

Djajadikerta

Roni

Trireksani

2015

Information & Management

View full text Add to dashboard Cite

Please cite this article as: H.G. Djajadikerta, S. Mat Roni, T. Trireksani, Dysfunctional information system behaviors are not all created the same: Challenges to the generalizability of security-based research, Information and Management (2015), http://dx.doi.org/10.1016/j.im. 2015.07.008 This is a PDF file of an unedited manuscript that has been accepted for publication. As a service to our customers we are providing this early version of the manuscript. The manuscript will undergo copyediting, typesetting, and review of the resulting proof before it is published in its final form. Please note that during the production process errors may be discovered which could affect the content, and all legal disclaimers that apply to the journal pertain.

show abstract

“…Common themes of security policy research include evaluations of the design of policies [11,14,36,49], policy implications for security awareness and culture [24,32,35,44,46], and overall security outcomes for the organization [15,23,43,51].…”

Section: Introductionmentioning

confidence: 99%

Seeing the forest and the trees: A meta-analysis of information security policy compliance literature

Cram

Proudfoot

D’Arcy

2017

Proceedings of the 50th Hawaii International Conference on System Sciences (2017)

View full text Add to dashboard Cite

show abstract

Managing the introduction of information security awareness programmes in organisations

Cited by 79 publications

References 41 publications

The Effects of Awareness Programs on Information Security in Banks: The Roles of Protection Motivation and Monitoring

The Effects of Awareness Programs on Information Security in Banks: The Roles of Protection Motivation and Monitoring

Dysfunctional information system behaviors are not all created the same: Challenges to the generalizability of security-based research

Seeing the forest and the trees: A meta-analysis of information security policy compliance literature

Contact Info

Product

Resources

About