A psychometric study of information technology risks in the workplace

Risk Analysis

Volumn 28, Issue 1, 2008, Pages 81-93

  Coles, Robert ^a   Hodgkinson, Gerard P ^b  

^a Merrill Lynch   (United Kingdom)

^b UNIVERSITY OF LEEDS   (United Kingdom)

Author keywords

IT risk; Multidimensional scaling; Psychometric paradigm; Risk assessment; Risk perception

Indexed keywords

DATA ACQUISITION; RISK ASSESSMENT; RISK PERCEPTION; STATISTICAL METHODS;

MULTIDIMENSIONAL SCALING; PSYCHOMETRIC PARADIGMS;

INFORMATION TECHNOLOGY;

INFORMATION TECHNOLOGY; RISK ASSESSMENT; RISK PERCEPTION; WORKPLACE;

ARTICLE; CLUSTER ANALYSIS; HUMAN; INFORMATION TECHNOLOGY; PSYCHOMETRY; RATING SCALE; RISK ASSESSMENT; WORKPLACE;

HUMANS; INFORMATION SCIENCE; OCCUPATIONAL HEALTH; PSYCHOMETRICS; RISK ASSESSMENT; RISK MANAGEMENT; WORKPLACE;

EID: 39849089088     PISSN: 02724332     EISSN: 15396924     Source Type: Journal    
DOI: 10.1111/j.1539-6924.2007.00963.x     Document Type: Article

References (50)

1. Arabie, P., Carroll, J. D., & DeSarbo, W. S. (1987). Three Way Scaling and Clustering (Sage University Paper Series on Quantitative Applications in the Social Sciences, series no. 07-065). Beverley Hills, CA : Sage.
2. Arabie, P., & Maschmeyer, C. (1988). Some current models for the perception and judgment of risk. Organizational Behavior and Human Decision Processes, 41, 300 329.
3. Bequai, A. (1997). Organised crime: Manipulating cyber-space. Computer Audit Update, December, 25 29.
4. Brun, W. (1992). Cognitive components in risk perception: Natural versus manmade risks. Journal of Behavioral Decision Making, 5, 117 132.
5. Carroll, J. D., & Chang, J. J. (1970). Analysis of individual differences in multidimensional scaling via an N-way generalization of "Eckart-Young" decomposition. Psychometrika, 35, 283 319.
6. CCTA 1991). An Overview of CRAMM. London, UK : HM Treasury - IT Security and Privacy Branch.
7. Coles, R. S. (1998). Information Security Survey 1998. London : KPMG.
8. Coles, R. S. (2000). Information Security Survey 2000. London : KPMG.
9. Coles, R. S. (2002). Global Information Security Survey 2002. London : KPMG.
10. Corter, J. E., & Tversky, A. (1986). Extended similarity trees. Psychometrika, 51, 429 451.
11. Farjoun, M., & Lai, L. (1997). Similarity judgments in strategy formulation: Role, process and implications. Strategic Management Journal, 18, 255 273.
12. Fischoff, B., Slovic, P., & Lichtenstein, S. (1978). How safe is safe enough? A psychometric study of attitudes toward technological risks and benefits. Policy Sciences, 9, 127 152.
13. Forgas J. P. (1976). The perception of social episodes: Categorical and dimensional representations in two different social milieus. Journal of Personality and Social Psychology, 34, 199 209.
14. Forgas, J. P. (1978). Social episodes and social structure in an academic setting: The social environment of an intact group. Journal of Experimental Social Psychology, 14, 434 448.
15. Forgas, J. P. (1981). Social episodes and group milieu: A study in social cognition. British Journal of Social Psychology, 20, 77 87.
16. Forgas, J. P., Brown, L. B., & Menyhart, J. (1980). Dimensions of aggression: The perception of aggressive episodes. British Journal of Social and Clinical Psychology, 19, 215 227.
17. Harvey, F. (2000) National news: Hackers chip in at digital security event. Financial Times, Nov 4.
18. Hodgkinson, G. P. (1997). Cognitive inertia in a turbulent market: The case of UK residential estate agents. Journal of Management Studies, 34, 921 945.
19. Hodgkinson, G. P. (2002). Comparing managers' mental models of competition: Why self-report measures of belief similarity won't do. Organization Studies, 23, 63 72.
20. Hodgkinson, G. P. (2005). Images of Competitive Space: A Study of Managerial and Organizational Strategic Cognition. Basingstoke, UK : Palgrave Macmillan.
21. Hogan, W. (1997). Corporate governance: Lessons from Barings. Abacus, 33, 26 48.
22. Hougham, M. (1996). London ambulance service computer aided despatch system. International Journal of Project Management, 14, 103 110.
23. Irwin, J. R., Jones, L. E., & Mundo, D. (1996). Risk perception and victim perception: The judgment of HIV cases. Journal of Behavioral Decision Making, 9, 1 22.
24. ISF 1993). Simple to Apply Risk Analysis for Information Systems. London : Information Security Forum.
25. Johnson, E. J., & Tversky, A. (1984). Representations of perceptions of risks. Journal of Experimental Psychology: Human Learning and Memory, 113, 55 70.
26. Kasperson, J. X., Kasperson, R. E., Pidgeon, N., & Slovic, P. (2003). The social amplification of risk: Assessing fifteen years of research and theory. In N. Pidgeon, R. E. Kasperson, & P. Slovic (Eds The Social Amplification of Risk (pp. 13 46). Cambridge, UK : Cambridge University Press.
27. Kelly, G. A. (1955). The Psychology of Personal Constructs (in 2 vols.). New York : Norton.
28. Kraus, N. N., & Slovic, P. (1988). Taxonomic analysis of perceived risk: Modelling individual and group perceptions within homogenous hazard domains. Risk Analysis, 8 (3 435 455.
29. Kruskal, J. B., & Wish, M. (1978). Multidimensional Scaling (Sage University Paper Series on Quantitative Applications in the Social Sciences, series no. 07-011). Beverley Hills, CA : Sage.
30. MacGregor, D. G. (2003). Public response to Y2K: Social amplification and risk adaptation: or, "how I learned to stop worrying and love Y2K". In N. Pidgeon, R. E. Kasperson, & P. Slovic (Eds The Social Amplification of Risk (pp. 243 261). Cambridge, UK : Cambridge University Press.
31. Mason, J. (1995). Bank's security chains rattled. Financial Times, September, 20.
32. NCC, DTI, ITSEC, Sysdeco & AT&T 1998). Business Information Security Survey 1998. London : National Computing Centre Limited.
33. Pidgeon, N., Kasperson, R. E., & Slovic, P. (2003). Introduction. In N. Pidgeon, R. E. Kasperson, & P. Slovic (Eds The Social Amplification of Risk (pp. 1 10). Cambridge : Cambridge University Press.
34. Pruzansky, S. (1975). How to Use SINDSCAL: A Computer Program for Individual Differences in Multidimensional Scaling. Unpublished manuscript. Murray Hill, NJ : AT&T Bell Laboratories.
35. Sattath, S., & Tversky, A. (1977). Additive similarity trees. Psychometrika, 42, 319 345.
36. Schiffman, S. S., Reynolds, M. L., & Young, F. W. (1981). Introduction to Multidimensional Scaling. New York : Academic Press.
37. Sheaffer, Z., Richardson, B., & Rosenblatt, Z. (1998). Early warning signals management: A lesson from the Barings crisis. Journal of Contingencies and Crisis Management, 6, 1 22.
38. Shepherd, S. (1996). Lessons learned from security weaknesses in the Netscape World Wide Web browser. IEE Colloquium on Public Uses of Cryptography, Digest 1996/085, 1 6.
39. Siegrist, M., Keller, C., & Kiers, H. (2005). A new look at the psychometric paradigm of perception of hazards. Risk Analysis, 25, 211 222.
40. Sjöberg, L., & Fromm, J. (2001). Information technology risks as seen by the public. Risk Analysis, 21, 427 441.
41. Slovic, P., Fischhoff, B., & Lichtenstein, S. (1982). Why study risk perception? Risk Analysis, 2, 83 93.
42. Slovic, P., Fischhoff, B., & Lichtenstein, S. (1984a). Behavioral decision theory perspectives on risk and safety. Acta Psychologica, 56, 183 203.
43. Slovic, P., Flynn, J., & Layman M. (1991). Perceived risk, trust, and the politics of nuclear waste. Science, 254, 1603 1607.
44. Slovic, P., Lichtenstein, S., & Fischhoff, B. (1984b). Modeling the societal impacts of fatal accidents. Management Science, 30, 464 474.
45. Slovic, P., MacGregor, D., & Kraus N. (1987). Perception of risk from automobile safety defects. Accident Analysis and Prevention, 19, 359 373.
46. Smith, J. (1995). How to investigate and prosecute network intrusions. Computer Security Journal, 11, 47 54.
47. Tversky, A. (1977). Features of similarity. Psychological Review, 84, 327 352.
48. Tversky, A., & Gati, I. (1978). Studies of similarity. In E. Rosch & B. B. Lloyd (Eds Cognition and Categorization. London : Lawrence Erlbaum Associates.
49. Wish, M., & Carroll, J. D. (1974). Applications of individual differences scaling to studies of human perception and judgment. In E. C. Carterette & M. P. Friedman (Eds Handbook of Perception (Vol. 2). New York : Academic Press.
50. Wish, M., Deutsch, M., & Kaplan, S. (1976). Perceived dimensions of interpersonal relations. Journal of Personality and Social Psychology, 33, 409 420.