Results

Found 2 articles

Clear filters

Buying in and Feeling Responsible: A Model of Extra-role Security Behavior

2023 | HICSS | Citations: 0
Authors: Nehme, Alaa; Marler, Laura

Abstract: Extra-role security behavior has been recognized as a salient element of informa ... Expand

Abstract: Extra-role security behavior has been recognized as a salient element of information security. Drawing upon the research on proactivity in the management literature, we identify ‘felt responsibility for constructive change’ (FRCC) as an important proactive motivational state that drives the behavior. We then follow proactive motivation theory and seek the contextual element and individual difference that precede FRCC. Based on buy-in theory, we propose that user participation in the development of information security-related activities and artifacts induces FRCC. To balance context specificity with generality, we model the individual difference of proactive personality as a moderator of this relation. Our model expands the scope of studying behavioral security by addressing users’ proactive involvement in protecting organizations’ information assets, as opposed to only examining reactive and passive user involvement. Further, the model extends the literature by addressing how promoting positive pre-kinetic events serves organizational information security. Collapse

Semantic filters: buy-in theory of participation

Topics: data security participatory design personality cybersecurity behavior decision making

Methods: design methodology theory development conceptual modelling

Theories: organizational behavior theory buy-in theory of participation motivation theory
Using Business Process Model Awareness to improve Stakeholder Participation in Information Systems Security Risk Management Processes

2015 | International Conference on Business Informatics | Citations: 0
Authors: Sillaber, Christian; Breu, Ruth

Abstract: The present paper examines stakeholders’ business process model awareness to mea ... Expand

Abstract: The present paper examines stakeholders’ business process model awareness to measure and improve stakeholder participation in information systems security risk management (ISRM) via a multi-method research study at the organizational level. Organizational stakeholders were interviewed to gain an understanding of their awareness of business processes and related security requirements in the context of an ongoing ISRM process. The research model was evaluated in four case studies. The findings indicate that stakeholders’ awareness of business process models contributed to an improved ISRM process, better alignment to the business environment and improved elicitation of security requirements. Following current research that considers users as the most important resource in ISRM, this study highlights the importance of involving appropriate stakeholders at the right time during the ISRM process and provides risk managers with decision support for the prioritization of stakeholder participation during ISRM processes to improve results and reduce overhead. Collapse

Semantic filters: buy-in theory of participation

Topics: information security risk business process management participatory design risk management IT security

Methods: business process modeling design methodology qualitative interview survey case study

Theories: system quality theory emergent interaction theory buy-in theory of participation

Page 1 of 1

AIS11

Journals

Conferences

Semantic Filter

Found 2 articles

Buying in and Feeling Responsible: A Model of Extra-role Security Behavior

Using Business Process Model Awareness to improve Stakeholder Participation in Information Systems Security Risk Management Processes