A Holistic View on Organizational IT Security: The Influence of Contextual Aspects during IT Security Decisions

2019 | HICSS | Citations: 14

Authors: Heidt, Margareta; Darmstadt, TU

Abstract: Decisions regarding organizational IT security are often approximated by models ... Expand

Abstract: Decisions regarding organizational IT security are often approximated by models drawing on normative statistical decision theories even though several IS researchers and studies in cognate disciplines have argued for the importance of contextual aspects. Based on findings in organizational and behavioral science and 25 expert interviews, this paper proposes a framework, postulating that IT security (investment) decisions are largely influenced by such contextual aspects: organizational, environmental, economic, and not least of all by cognitive and behavioral aspects of decision-makers. Collapse

Topics: IT security decision making individual characteristic information security risk backup

Methods: literature study qualitative interview qualitative content analysis literature sample descriptive statistic