Understanding computer security behavioral intention in the workplace

Abstract

If you would like to write for this, or any other Emerald publication, then please use our Emerald for Authors service information about how to choose which publication to write for and submission guidelines are available for all. Please visit www.emeraldinsight.com/authors for more information. About Emerald www.emeraldinsight.comEmerald is a global publisher linking research and practice to the benefit of society. The company manages a portfolio of more than 290 journals and over 2,350 books and book series volumes, as well as providing an extensive range of online products and additional customer resources and services.Emerald is both COUNTER 4 and TRANSFER compliant. The organization is a partner of the Committee on Publication Ethics (COPE) and also works with Portico and the LOCKSS initiative for digital archive preservation. AbstractPurpose -In organizations today, protecting information and computer assets from attacks or disaster has become one of the top managerial issues. The purpose of this paper is to propose and empirically test a comprehensive model of computer security behaviors of individuals in the workplace. Design/methodology/approach -The model was developed based on the reference disciplines of the theory of reasoned action, moral obligation, protection motivation theory (PMT), and organizational context factors. The measurements for the variables in the model, including computer security behavioral intention were adapted from prior studies, and their reliability and validity were verified by a confirmatory factor analysis. The model was empirically analyzed by structural equation modeling with respect to data from 162 employees in a number of organizations in Korea. Findings -The results indicate that moral obligation and organizational norms along with attitude toward computer security behavior have significant impacts on employees' behavioral intentions of computer security. In addition, perceived threat severity, response efficacy, and self-efficacy, which are drawn from the PMT, have significant impacts on employee attitude, whereas security policy has significant impacts on the organizational norms. Originality/value -The paper provides a useful model for analyzing employees' computer security behaviors in the workplace. Also, the paper reveals that moral obligation as well as attitude toward computer security behavior was a significant predictor of an individual employee's intention to practice computer security behavior.

Intention to use new mobile payment systems: a comparative analysis of SMS and NFC payments

“…Consequently, in the online environment, it is expected that attitude facilitate transactions and reduce the barriers to the adoption of the terms of trade (Pavlou, 2002a,b), and more specifically, in our case, favour the intention to use mobile payment systems (Schierz, Schilke, & Wirtz, 2010). In line with previous research (Tsai, Zhu, Ho, & Wu, 2010;Yoon & Kim, 2013), we propose a similar relationship in the case of the new systems of payment. This results in the following hypothesis:…”

Evolvement of Information Security Research on Employees' Behavior: A Systematic Review and Future Direction

“…Many of these factors relate to the consequentialism ethical perspective, where factors such as perceived threat vulnerability (employees' perceptions of probability of harm occurring to organizations resulting from IS policy noncompliance behaviors) and perceived threat severity (employees' perceptions of severity of harm to organizations resulting from IS policy noncompliance behaviors if harm has occurred) [2,5,9,[19][20][21][22][23][24][25]. Concurrently, others have studied factors with the deontological focus, such as moral obligation (employees' perceptions of severity of harm to organization resulting from their noncompliance behaviors if harm has occurred) [23,[26][27][28][29][30]. However, regarding the virtue perspective, there was no evidence of any study examining factors relating to this perspective.…”

“…Compared with the results of Sommestad et al's systematic review [38], our findings were reassuring, with all of the journal articles identified by Sommestad et al that matched our inclusion and exclusion criteria included in our review. Furthermore, 15 additional journal articles were identified in our review but not included in Sommestad et al's review [2,3,20,23,24,26,27,[55][56][57][58][59][60][61][62].…”

“…The top three theories were the DT, theory of reasoned action/planned behavior (TRA), and protection motivation theory (PMT). As shown in Table 3, 12 studies relied on the DT [3, 12, 19, 26-28, 55, 62, 63, 66, 69, 70], whereas the TRA was used in seven studies [5,10,11,22,23,61,67] and PMT in five studies [9,20,21,24,74]. Both the rational choice theory (RCT) and social cognitive theory (SCT) have been adopted in three studies.…”

“…It was not until 2006 when the TRA was introduced in IS research [22], which resulted in its use in six papers [5,10,11,23,61,67]. The first empirical study based on the PMT was published in 2008 [24], and this theory was cited in five papers [9,20,21,24,74].…”