Results

Found 29 articles

Clear filters

Applying Dispositional, Situational, and Organizational Risk Propensity to Technology Threat Avoidance Theory - A tripartite View

2023 | European Conference On Information Systems | Citations: 0
Authors: Pfaff, Theresa; Nastjuk, Ilja; Matschak, Tizian

Abstract: Human error is one of the biggest cybersecurity vulnerabilities in organization ... Expand

Abstract: Human error is one of the biggest cybersecurity vulnerabilities in organizations, making organizational security solutions become ineffective. It is therefore crucial for organizations to adapt their risk management in concordance to arising threats. Using the Technology Threat Avoidance Theory (TTAT) as a theoretical lens, this article investigates the relationship between security threats, employees' risk perception, and avoidance behavior. While recent research has suggested that an individual's dispositional risk propensity can influence the perception of technology threats, we argue that additional risk facets, namely situational and organizational risk propensity, can influence employees' threat perception. Through a scenario-based online experiment, our study reveals that risk perception in a work environment is not a static risk assessment but rather depends on situational aspects and the organization's risk propensity. Our study contributes to existing research by investigating the different aspects of risk-taking in an organizational context improving our understanding of employees' behavior at work. Collapse

Semantic filters: technology threat avoidance theory

Topics: electronic mail self efficacy malware website IT security

Methods: survey experiment PLS tool partial least squares path modeling computational algorithm

Theories: technology threat avoidance theory
Protection Motivation Theory in Information Security Behavior Research: Reconsidering the Fundamentals

2023 | Communications of the Association for Information Systems | Citations: 0
Authors: Siponen, Mikko; Rönkkö, Mikko; Fufan, Liu; Haag, Steffi; Laatikainen, Gabriella

Abstract: Scholars commonly use protection motivation theory (PMT) by Rogers to examine i ... Expand

Abstract: Scholars commonly use protection motivation theory (PMT) by Rogers to examine information systems (IS) security behaviors and behavioral intentions. A recent, influential paper by Boss, Galletta, Lowry, Moody, and Polak (2015; hereafter BGLMP) in MIS Quarterly outlines correct and incorrect uses of PMT in Information Security behavior research. In this paper, we review some of BGLMP's key recommendations, such as the claim that all IS behavior studies that apply PMT should always use the model of the full theory, contain and measure fear, and measure actual behaviors. We defend an interpretation of Rogers (1975Rogers ( , 1983) that differs from the interpretation that BGLMP propose. We present evidence that Rogers' PMT and the empirical evidence do not adequately support many of BGLMP's suggestions and that these suggestions contradict good scientific practices (e.g., restricting the use of the method of isolation) that the philosophy of science and the original literature on PMT uphold. As a result, if reviewers and editors continue to embrace these recommendations, they could hinder the progress of IS behavior research by not allowing isolation or the combination of different theoretical components. In contrast to BGLMP's paper, we argue that further PMT research can focus on isolated PMT components and combine them with other theories. Some of our ideas (e.g., isolation) are not PMT-specific and could be useful for IS research in general. In summary, we contest BGLMP's recommendations and offer revised recommendations in return. Collapse

Semantic filters: technology threat avoidance theory

Topics: malware data security behavioral intention self efficacy social influence

Methods: functional magnetic resonance imaging literature study experiment experimental group structural equation modeling

Theories: protection motivation theory technology threat avoidance theory
Employee responses to information security related stress: Coping and violation intention
PDF
2023 | Information Systems Journal | Citations: 1
Authors: Yazdanmehr, Adel; Li, Yuan; Wang, Jingguo

Abstract: Studies on employee responses to the information security policy (ISP) demands t ... Expand

Abstract: Studies on employee responses to the information security policy (ISP) demands to show that employees who experience stress over the demands would resort to emotion-focused coping to alleviate the stress and subsequently violate the ISP. However, their intent to engage in problem-focused coping to meet the ISP demands and possibly reduce ISP violations has yet to be analysed. We argue that both types of coping responses coexist in employee responses to ISP demands and they together influence ISP violation intention. Drawing upon the Transactional Model of Stress and Coping, we examine how security-related stress (SRS) triggers inward and outward emotion-focused coping, and problem-focused coping to the ISP demands, which together influence employee ISP violations. We also examine how ISP-related self-efficacy and organisational support moderate the effects of SRS on coping responses. We surveyed 200 employees in the United States to test our model. The results indicate that SRS triggers all three coping responses, and ISP-related self-efficacy and organisational support reduce the effects of SRS on inward and outward emotion-focused coping. Problem-focused coping then decreases ISP violation intention, whereas inward and outward emotion-focused coping increases it. The model was further verified with ISP compliance as the outcome construct, which yielded consistent results. Understanding various coping responses to SRS and the factors that facilitate or inhibit the responses can assist managers in effectively designing and implementing the ISP to reduce employee ISP violations. Collapse

Semantic filters: technology threat avoidance theory

Topics: self efficacy security policy data security problem solving internet technology

Methods: survey descriptive statistic partial least squares regression survey design factor analysis

Theories: technology threat avoidance theory
Risk Taking Behaviors Using Public Wi-Fi™
PDF
2022 | Information Systems Frontiers | Citations: 0
Authors: Choi, Hoon S.; Carpenter, Darrell; Ko, Myung S.

Abstract: Dramatic increases in public Wi-Fi™ (hereafter referred to as Wi-Fi) availabilit ... Expand

Abstract: Dramatic increases in public Wi-Fi™ (hereafter referred to as Wi-Fi) availability have occurred over the last decade. Although Wi-Fi provides convenient network connectivity, it has significant security vulnerabilities. Despite widespread knowledge of potential vulnerabilities of public Wi-Fi, most people simply connect to it in public places. We investigated the individual calculus behind risk-taking behavior based on the theoretical foundations of risk taking behavior, technology threat avoidance theory, prospect theory, and self-determination theory. Using survey data collected from 1313 respondents in the United States, this study found that avoidance motivation, risk averting propensity, and intrinsic and extrinsic motivations affect intention to use public Wi-Fi. In addition, our results indicate that avoidance motivation is related to safeguard effectiveness, safeguard cost, and perceived threat, while risk averting propensity is associated with positive outcome history, age, gender, and education attainment. Collapse

Semantic filters: technology threat avoidance theory

Topics: wireless LAN usage intention intrinsic motivation information system use self efficacy

Methods: survey statistical hypothesis test structural equation modeling partial least squares regression data transformation

Theories: technology threat avoidance theory prospect theory self determination theory
Assessing and Enhancing Adversarial Robustness of Predictive Analytics: An Empirically Tested Design Framework
PDF
2022 | Journal of Management Information Systems | Citations: 4
Authors: Li, Weifeng; Chai, Yidong

Abstract: As predictive analytics increasingly applies supervised machine learning (SML) m ... Expand

Abstract: As predictive analytics increasingly applies supervised machine learning (SML) models to inform mission-critical decision-making, adversaries become incentivized to exploit the vulnerabilities of these SML models and mislead predictive analytics into erroneous decisions. Due to the limited understanding and awareness of such adversarial attacks, the predictive analytics knowledge and deployment need a principled technique for adversarial robustness assessment and enhancement. In this research, we leverage the technology threat avoidance theory as the kernel theory and propose a research framework for assessing and enhancing the adversarial robustness of predictive analytics applications. We instantiate the proposed framework by developing a robust text classification system, the ARText system. The proposed system is rigorously evaluated in comparison with benchmark methods on two tasks extensively enabled by SML: spam review detection and spam email detection, which then confirmed the utility and effectiveness of our ARText system. Results from numerous experiments revealed that our proposed framework could significantly enhance the adversarial robustness of predictive analytics applications. Collapse

Semantic filters: technology threat avoidance theory

Topics: email spam electronic mail artificial intelligence decision making risk management

Methods: machine learning ensemble learning experiment computational algorithm meta design

Theories: technology threat avoidance theory
Emotional reactions and coping responses of employees to a cyber-attack: A case study
PDF
2021 | International Journal of Information Management | Citations: 0
Authors: Stacey, Patrick; Taylor, Rebecca; Olowosule, Omotolani; Spanaki, Konstantina

Abstract: Cybersecurity is a serious threat to information technology (IT) systems, with m ... Expand

Abstract: Cybersecurity is a serious threat to information technology (IT) systems, with most organisations now relying on their IT systems to function day-to-day. Therefore, it is crucial that organisations ensure they are protected. This research investigates the emotional and coping responses of employees towards a cyber-attack. Data was collected through an in-depth case study approach (24 semi-structured interviews) conducted at a global manufacturing company, along with primary observations and a corpus of secondary materials. Our data analysis applied a grounded approach which was then refined using an emotion theoretic lens with the application of Technology Threat Avoidance Theory (TTAT). Drawing on structural appraisal theory, our findings indicate the IT security team in the case study oscillated between positive problem-focused coping and negative emotionfocused coping. A key explanatory feature or turnaround mechanism that mediated this oscillation was senior management empathy and resource mobilization. Building on the analyses, a conceptual model is developed called the Transformation of Coping through Empathic Leadership (T-CEL). The research suggests the crucial role that senior management play in transforming the emotional and coping capabilities of employees through their intervention and support. The study extends the IS Security theoretical background through a TTAT-lens for the analysis of cyber-attack incidents. Collapse

Semantic filters: technology threat avoidance theory

Topics: IT security IT security threat IT workforce electronic mail pseudonymity

Methods: qualitative interview case study personal interview conceptual modelling theory development

Theories: appraisal theory technology threat avoidance theory technology acceptance theory
Nothing but Cash? Mobile Payment Acceptance in Germany

2020 | International Conference on Information Systems | Citations: 0
Authors: Baersch, Soeren; Siepermann, Markus; Lackes, Richard; Wulfhorst, Valerie

Abstract: The introduction of mobile payment (MP) has gained increasing attention from Ger ... Expand

Abstract: The introduction of mobile payment (MP) has gained increasing attention from German consumers. However, to date, consumers’ MP use has not developed extensively. The majority of German customers still prefer cash and card payment to MP. Thus, this paper aims to explore the drivers and inhibitors of MP adoption, respectively, the continuance intention, for inexperienced prospective adopters and experienced users. By this, MP is compared to existing payment alternatives that MP needs to complement. The Technology Threat Avoidance Theory is used as theoretical basis. Results show that for adoption and continuance intention different factors matter. While inexperienced users are afraid of all kind of risks with financial threats being the most influential one, for experienced users performance threats are more important and the data risk became insignificant. Also, social influence and self-efficacy loose their influence. Collapse

Semantic filters: technology threat avoidance theory

Topics: usage intention social influence self efficacy iOS Android

Methods: survey statistical power analysis parametric test Student's t-test statistical hypothesis test

Theories: technology acceptance theory technology threat avoidance theory
Motivating information security policy compliance: The critical role of supervisor-subordinate guanxi and organizational commitment
PDF
2020 | International Journal of Information Management | Citations: 0
Authors: Liu, Chenhui; Wang, Nengmin; Liang, Huigang

Abstract: Employees’ non-compliance with organizational information security policy (ISP) ... Expand

Abstract: Employees’ non-compliance with organizational information security policy (ISP) when using informational resources has become the main reason for continuous security incidents. Drawing upon technology threat avoidance theory (TTAT) and social exchange theory (SET), our study investigates the influence of supervisorsubordinate guanxi (SSG) and organizational commitment in the information security management. Our hypotheses were tested using survey data from 235 Chinese government employees. Results not only confirm the direct effect of SSG on government employees’ ISP compliance but also suggest that SSG indirectly influences compliance behavior via the mediation of organizational commitment. Organizational commitment weakens the negative influence of perceived costs on compliance behavior and also weakens the positive effect of self-efficacy on employees’ ISP compliance. For low-commitment employees, the negative influence of perceived costs on compliance behavior is more significant than that of those with strong organizational commitment, and selfefficacy exerts a stronger effect on ISP compliance for low-commitment employees than it does for high-commitment employees. This study contributes to current literature on information systems (IS) by confirming the critical roles of SSG and organizational commitment in motivating employees’ compliance behavior. Collapse

Semantic filters: technology threat avoidance theory

Topics: organizational commitment self efficacy information management IT security information security management

Methods: survey partial least squares regression descriptive statistic data transformation statistical hypothesis test

Theories: social psychology theory social exchange theory technology threat avoidance theory
Toward Security Capitulation Theory

2020 | Americas Conference on Information Systems | Citations: 0
Authors: McLeod, Alexander; Dolezel, Diane

Abstract: This paper describes an exploratory study of capitulation theory which explains ... Expand

Abstract: This paper describes an exploratory study of capitulation theory which explains individuals' feelings of surrender and inevitability because of distrust of security, theft of privacy, vulnerability and security threats. The never-ending data breach notices, security breaches and a lack of control may cause individual users to give up on security or capitulate affecting organizational security. We hypothesized users have given up on performing cybersecurity measures because they believe security breaches are unavoidable. We propose security capitulation theory to explain these surrendering behaviors. To test the theory, we craft a survey research model based on technology threat avoidance and protection motivation theory. Results indicated some explanatory power and provide opportunities for security capitulation theory improvement. This exploratory study provides initial insights into security capitulation behaviors. Collapse

Semantic filters: technology threat avoidance theory

Topics: IT security threat privacy IT security cybersecurity behavior

Methods: survey structural equation modeling survey design partial least squares path modeling theory development

Theories: protection motivation theory technology threat avoidance theory
Having Two Conflicting Goals in Mind: The Tension Between IS Security and Privacy when Avoiding Threats

2020 | HICSS | Citations: 1
Authors: Olt, Christian M; Wagner, Amina

Abstract: Despite users of personal IT devices perceive high risks of losing their persona ... Expand

Abstract: Despite users of personal IT devices perceive high risks of losing their personal data if their devices get lost or damaged, many are reluctant to use userfriendly online services (i.e., online backups) to recover from such incidents. We suggest that the reason for this denial are information privacy concerns because users need to disclose their personal files to the safeguard provider. As safeguarding services promise to reduce the IS security threat of losing data, individuals are subsequently tensed between two goals: protecting their data against loss (IS security) and their information privacy. To shed light on this goal conflict, our work builds on the theory of goal-directed behavior. Based on a quantitative online survey among 446 participants, we show that privacy concerns impede threat avoidance to prevent data loss. Comparing current users and non-users of online backup services, our results confirm that provider-related privacy concerns are significantly higher for non-users. Collapse

Semantic filters: technology threat avoidance theory

Topics: information privacy concern privacy usage intention backup IT security

Methods: archival research survey post-hoc analysis partial least squares regression theoretical contribution

Theories: technology threat avoidance theory privacy calculus theory protection motivation theory

Page 1 of 3 Next

AIS11

Journals

Conferences

Semantic Filter

Found 29 articles

Applying Dispositional, Situational, and Organizational Risk Propensity to Technology Threat Avoidance Theory - A tripartite View

Protection Motivation Theory in Information Security Behavior Research: Reconsidering the Fundamentals

Employee responses to information security related stress: Coping and violation intention

Risk Taking Behaviors Using Public Wi-Fi™

Assessing and Enhancing Adversarial Robustness of Predictive Analytics: An Empirically Tested Design Framework

Emotional reactions and coping responses of employees to a cyber-attack: A case study

Nothing but Cash? Mobile Payment Acceptance in Germany

Motivating information security policy compliance: The critical role of supervisor-subordinate guanxi and organizational commitment

Toward Security Capitulation Theory

Having Two Conflicting Goals in Mind: The Tension Between IS Security and Privacy when Avoiding Threats