Results

Found 3 articles

Clear filters

An Adversarial Dance: Toward an Understanding of Insiders’ Responses to Organizational Information Security Measures
PDF
2023 | Journal of the Association for Information Systems | Citations: 0
Authors: Balozian, Puzant; Burns, A.; Leidner, Dorothy

Abstract: Despite the increased focus on organizational security policies and programs, s ... Expand

Abstract: Despite the increased focus on organizational security policies and programs, some employees continue to engage in maladaptive responses to security measures (i.e., behaviors other than those recommended, intended, or prescribed). To help shed light on insiders' adaptive and maladaptive responses to IS security measures, we conducted a case study of an organization at the forefront of security policy initiatives. Drawing on the beliefs-actions-outcomes (BAO) model to analyze our case data, we uncover a potentially nonvirtuous cycle consisting of security-related beliefs, actions, and outcomes, which we refer to as an "adversarial dance." Explaining our results, we describe a novel belief framework that identifies four security belief profiles and uncovers an underexplored outcome of IS security: insiders' lived security experiences. We find that individuals' unfavorable lived security experiences produce counterproductive security-related beliefs that, in turn, lead to maladaptive behaviors. Maladaptive behaviors create new potential for security risk, leading to increased organizational security measures to counter them. Thus, the adversarial dance continues, as the new security measures have the potential to reinforce counterproductive security-related beliefs about the importance and risk of IS security and lead to new maladaptive behaviors. To help situate our findings within the current security literature, we integrate the results with prior research based on extant theories. While this paper is not the first to suggest that security measures can elicit maladaptive behaviors, the emergent belief framework and expanded BAO model of IS security constitute an important contribution to the behavioral IS security literature.Puzant Balozian is an assistant professor of computer information systems at James Madison University. His research focus is primarily on the impacts of organizational factors on individual user behaviors in the context of information security and privacy and addressing security policy compliance and violation. Collapse

Semantic filters: IT security defense hard disk drive

Topics: IT security IT security defense productivity IT security threat anonymity

Methods: case study qualitative interview personal interview theory development survey

Theories: information systems theory neutralization theory behavioral theory
Back to Pen and Paper: Recovering Assessment Questions from Computer-Based Examination Applications

2017 | Americas Conference on Information Systems | Citations: 0
Authors: Saini, Shalabh; Grispos, George; Liu, Charles Zhechao; Choo, Kim-Kwang Raymond

Abstract: Computer-based examination platforms are increasingly utilized to deliver examin ... Expand

Abstract: Computer-based examination platforms are increasingly utilized to deliver examinations. The advantages of implementing such a solution over a traditional pen-and-paper approach include support for remote candidates, reduced financial costs, shorter grading time and reduced carbon footprints. While the benefits are attractive, the nature of computer-based examinations makes them more susceptible to cheating. One conjecture previously discussed in the literature is that candidates could recover questions from hard drives. However, minimal research has been conducted to affirm these assumptions. Hence, this research investigates the extent to which questions can be recovered from a computer-based examination and makes recommendations to counter such problems based on the Routine Activity Theory. The study contributes to the discipline by empirically demonstrating that questions can be recovered from three computer-based examination applications using freely available computer forensic tools, and highlighting the need for additional security measure to enhance the creditability of the computer-based examination applications. Collapse

Semantic filters: IT security defense hard disk drive

Topics: virtualization technology laptop computer hard disk drive Microsoft Windows criminality

Methods: experiment case study synthesis statistical hypothesis test literature study

Theories: activity theory
A field study of corporate employee monitoring: Attitudes, absenteeism, and the moderating influences of procedural justice perceptions
PDF
2009 | Information and Organization | Citations: 7
Authors: Workman, Michael

Abstract: Managers are responsible for creating and enforcing company policies governing o ... Expand

Abstract: Managers are responsible for creating and enforcing company policies governing organizational practices, and one practice that is on the rise in organizations involves monitoring of employees for security purposes. The research literature on security behaviors has focused almost exclusively on compliance with or obedience to such policies; however, compliance with prescribed behaviors is not complete in terms of organizational performance. People may comply with policies with which they disagree, but harbor resentments and exhibit counterproductive and even destructive behaviors in protest. We conducted a field study of organizational monitoring policies and practices using factors from the threat control model and found that perceptions of threat, self-efficacy, and trust in the organization were key factors in attitudes about monitoring, and that these factors interacted with employee perceptions of organizational procedural justice such that high perceptions of organizational procedural justice moderated negative attitudes toward corporate monitoring, and better attitudes about monitoring was found to associate with reduced employee absences from the job. Collapse

Semantic filters: IT security defense hard disk drive

Topics: self efficacy electronic mail electronic work monitoring data center electronic surveillance

Methods: statistical hypothesis test field study survey data transformation factor analysis

Theories: procedural justice theory

Page 1 of 1

AIS11

Journals

Conferences

Semantic Filter

Found 3 articles

An Adversarial Dance: Toward an Understanding of Insiders’ Responses to Organizational Information Security Measures

Back to Pen and Paper: Recovering Assessment Questions from Computer-Based Examination Applications

A field study of corporate employee monitoring: Attitudes, absenteeism, and the moderating influences of procedural justice perceptions