Avoidance of information technology threats: A theoretical perspective

MIS Quarterly: Management Information Systems

Volumn 33, Issue 1, 2009, Pages 71-90

  Liang, Huigang ^a   Xue, Yajiong ^a  

^a EAST CAROLINA UNIVERSITY   (United States)

Author keywords

Avoidability; Coping; Costs; Cybernetics; Effectiveness; Malicious IT; Safeguarding measure; Self efficacy; Severity; Susceptibility; Technology threat avoidance theory; Threat; Virtuous IT

Indexed keywords

COSTS; CYBERNETICS; MAGNETIC SUSCEPTIBILITY; SECURITY OF DATA;

AVOIDABILITY; COPING; EFFECTIVENESS; MALICIOUS IT; SAFEGUARDING MEASURE; SELF EFFICACY; SEVERITY; THREAT; THREAT-AVOIDANCE THEORY; VIRTUOUS IT;

BEHAVIORAL RESEARCH;

EID: 60649084770     PISSN: 02767783     EISSN: None     Source Type: Journal    
DOI: 10.2307/20650279     Document Type: Article

References (109)

1. Adams, D. A., Nelson, R. R., and Todd, P. A. 1992. "Perceived Usefulness, Ease of Use, and Usage of Information Technology: A Replication," MIS Quarterly (16:2), pp. 227-247.
2. Agarwal, R., Sambamurthy, V., and Stair, R. M. 2000. "Research Report: The Evolving Relationship Between General and Specific Computer Self-Efficacy - An Empirical Assessment," Information Systems Research (11:4), pp. 418-430.
3. Ajzen, I. 1991. "The Theory of Planned Behavior," Organizational Behavior & Decision Processes (50), pp. 179-211.
4. Ajzen, I., and Fishbein, M. 1980. Understanding Attitudes and Predicting Behavior, Englewood Cliffs, NJ: Prentice Hall.
5. Bagchi, K., and Udo, G. 2003. "An Analysis of the Growth of Computer and Internet Security Breaches," Communications of the AIS (12), pp. 684-700.
6. Bandura, A. 1977. "Self-Efficacy: Toward a Unifying Theory of Behavior Change," Psychological Review (84), pp. 191-215.
7. Bandura, A. 1982. "Self-Efficacy Mechanism in Human Agency," American Psychologist (37), pp. 122-147.
8. Barsky, R. B., Juster, F. T., Kimball, M. S., and Shapiro, M. D. 1997. "Preference Parameters and Behavioral Heterogeneity: An Experimental Approach in the Health and Retirement Study," The Quarterly Journal of Economics (72:3), pp. 537-579.
9. Baskerville, R. 1988. Designing Information Systems Security, Chichester, UK: John Wiley.
10. Baskerville, R. 1991a. "Risk Analysis: An Interpretive Feasibility Tool in Justifying Information Systems Security," European Journal of Information Systems (1:2), pp. 121-130.
11. Baskerville, R. 1991b. "Risk Analysis as a Source of Professional Knowledge," Computer & Security (10:8), pp. 749-764.
12. Baskerville, R. 1993. "Information Systems Security Design Methods: Implications for Information Systems Development," ACM Computing Surveys (25:4), pp. 375-414.
13. Beaudry, A., and Pinsonneault, A. 2005. "Understanding User Responses to Information Technology: A Coping Model of User Adaptation," MIS Quarterly (29:3), pp. 493-524.
14. Bhattacherjee, A. 2001. "Understanding Information Systems Continuance: An Expectation-Confirmation Model," MIS Quarterly (25:3), pp. 351-370.
15. Bhattacherjee, A., and Premkumar, G. 2004. "Understanding Changes in Belief and Attitude Toward Information Technology Usage: A Theoretical Model and Longitudinal Test," MIS Quarterly (28:2), pp. 229-254.
16. Brown, S.A., Massey, A. P., Montoya-Weiss, M. M., and Burkman, J. P. 2002. "Do I Really Have To? User Acceptance of Mandated Technology," European Journal of Information Systems (11), pp. 283-295.
17. Burnkrant, R. E., and Cousineau, A. 1975. "Informational and Normative Social Influence in Buyer Behavior," Journal of Consumer Research (2), pp. 206-215.
18. Carver, C. S. 2006. "Approach, Avoidance, and the Self-Regulation of Affect and Action," Motivation and Emotion (30), pp. 105-110.
19. Carver, C. S., and Scheier, M. F. 1982. "Control Theory: A Useful Conceptual Framework for Personality-Social, Clinical, and Health Psychology," Psychological Bulletin (92:1), pp. 111-135.
20. Carver, C. S., and White, T. L. 1994. "Behavioral Inhibition, Behavioral Activation, and Affective Responses to Impending Reward and Punishment: The BIS/BAS Scales," Journal of Personality and Social Psychology (67), pp. 319-333.
21. Chau, P. Y. K. 2001. "Influence of Computer Attitude and Self-Efficacy on IT Usage Behavior," Journal of End User Computing (13:1), pp. 26-33.
22. Compeau, D. R., and Higgins, C. A. 1995. "Computer Self-Efficacy: Development of a Measure and Initial Test," MIS Quarterly (19), pp. 189-211.
23. Compeau, D. R., Higgins, C. A., and Huff, S. 1999. "Social Cognitive Theory and Individual Reactions to Computing Technology: A Longitudinal Study," MIS Quarterly (23:2), 1999, pp. 145-158.
24. Computer Economics. 2003. "Virus Attack Costs on the Rise-Again," September (http://www.computereconomics.com/article.cfm?id= 873).
25. Computer Economics. 2007. "Annual Worldwide Economic Damages from Malware Exceed $13 Billion," June (http://www. computereconomics.com/article. cfm?id=1225).
26. Culnan, M. 1993. ""How Did They Get My Name?" An Exploratory Investigation of Consumer Attitudes Toward Secondary Information Use," MIS Quarterly (17:3), pp. 341-363.
27. Culnan, M., and Armstrong, P. 1999. "Information Privacy Concerns, Procedural Fairness, and Impersonal Trust: An Empirical Investigation," Organization Science (10:1), pp. 104-115.
28. Davidson, R. 1995. "Cerebral Asymmetry, Emotion, and Affective Style," in Brain Asymmetry, K. Hugdahl (ed.), Cambridge, MA: MIT Press.
29. Davis, F. D. 1989. "Perceived Usefulness, Perceived Ease of Use, and User Acceptance of Information Technology," MIS Quarterly (13:3), pp. 319-338.
30. Davis, F. D., Bagozzi, R. P., and Warshaw, P. R. 1989. "User Acceptance of Computer Technology: A Comparison of Two Theoretical Models," Management Science (35:8), pp. 982-1003.
31. Deutsch, M., and Gerard, H. B. 1955. "A Study of Normative and Informational Social Influences upon Individual Judgment," Journal of Abnormal and Social Psychology (51), pp. 629-636.
32. Dhillon, G., and Backhouse, J. 2000. "Information System Security Management in the New Millennium," Communications of the ACM (43:7), pp. 125-128.
33. Edwards, J. 1992. "A Cybernetic Theory of Stress, Coping, and Well-Being in Organizations," Academy of Management Review (17:2), pp. 238-274.
34. Elliot, A. J. 2006. "The Hierarchical Model of Approach-Avoidance Motivation," Motivation and Emotion (30), pp. 111-116.
35. Elliot, A. J., and Covington, M. V. 2001. "Approach and Avoidance Motivation," Educational Psychology Review (13:2), pp. 73-92.
36. Filbeck, G., Hatfield, P., and Horvath, P. 2005. "Risk Aversion and Personality Type," Journal of Behavioral Finance (6:4), pp. 170-180.
37. Fishbein, M., and Ajzen, I. 1975. Belief, Attitude, Intention and Behavior: An Introduction to Theory and Research, Reading, MA: Addison-Wesley.
38. Flynn, M. F., Lyman, R. D., and Prentice-Dunn, S. 1995. "Protection Motivation Theory and Adherence to Medical Treatment Regimens for Muscular Dystrophy," Journal of Social and Clinical Psychology 1995, pp. 61-75.
39. Freud, S. 1915. "Repression," in Complete Psychological Works of Sigmund Freud, London: Hogarth.
40. Goodhue, D., and Straub, D. 1991. "Security Concerns of System Users: A Study of Perceptions of the Adequacy of Security," Information & Management (20), pp. 13-27.
41. Gordon, L. A., Loeb, M. P., Lucyshyn, W., and Richardson, R. 2006. "2006 CSI/FBI Computer Crime and Security Survey," Computer Security Institute (http://i.cmpnet.com/gocsi/db-area/pdfs/fbi/FBI2006.pdf).
42. Grable, J. 2000. "Financial Risk Tolerance and Additional Factors That Affect Risk Taking in Everyday Money Matters," Journal of Business and Psychology (14:4), pp. 625-630.
43. Grable, J., Lytton, R. H., O'Neill, B., Joo, S., and Klock, D. 2006. "Risk Tolerance, Projection Bias, Vividness, and Equity Prices," Journal of Investing, (15:2), pp. 68-74.
44. Gray, J. A. 1982. The Neuropsychology of Anxiety, New York: Oxford University Press.
45. Green, S. G., and Welsh, M. A. 1988. "Cybernetics and Dependence: Reframing the Control Concept," Academy of Management Review (13:2), pp. 287-301.
46. Hallahan, T. A., Faff, R. W., and McKenzie, M. D. 2004. "An Empirical Investigation of Personal Financial Risk Tolerance," Financial Service Review (13:1), pp. 57-78.
47. Higgins, E. T. 1997. "Beyond Pleasure and Pain," American Psychologist (52:12), pp. 1280-1300.
48. Ho, R. 1998. "The Intention to Give up Smoking: Disease Versus Social Dimensions," Journal of Social Psychology (138), pp. 368-380.
49. Hoffman, D. L., Novak, T. P., and Venkatesh, A. 2004. "Has the Internet Become Indispensable?," Communications of the ACM (47:7), pp. 37-42.
50. Householder, A., Houle, K., and Dougherty, C. 2002. "Computer Attack Trends Challenge Internet Security," IEEE Computer (Supplement) (35:4), pp. 5-7.
51. Hunter, P. 2004. "New Threats This Year," Computer Fraud & Security (2004:11), pp. 12-13.
52. James, W. 1890. The Principles of Psychology, New York: Henry Holt & Co.
53. Janis, M. 1967. "Effects of Fear Arousal on Attitude Change: Recent Developments in Theory and Experimental Research," in Advances in Experimental Social Psychology, L. Berkowitz (ed.), New York: Academic Press, pp. 166-224.
54. Janz, N. K., and Becker, M. H. 1984. "The Health Belief Model: A Decade Later," Health Education Quarterly (11:1), pp. 1-45.
55. Kahneman, D., and Tversky, A. 1979. "Prospect Theory: An Analysis of Decision Under Risk," Econometrica (47:2), pp. 263-291.
56. Karahanna, E., Straub, D., and Chervany, N. 1999. "Information Technology Adoption Across Time: A Cross-Sectional Comparison of Pre-Adoption and Post-Adoption Beliefs," MIS Quarterly (23:2), pp. 183-213.
57. Kelman, H. C. 1974. "Further Thoughts on the Processes of Compliance, Identification, and Internalization," in Perspectives on Social Power, J. T. Tedeschi (ed.), Chicago: Aldine, pp. 126-171.
58. Klein, H. J. 1989. "An Integrated Control Theory Model of Work Motivation," Academy of Management Review (14:2), pp. 150-172.
59. Lang, P., Bradley, M., and Cuthbert, B. 1990. "Emotion, Attention, and the Startle Reflex," Psychological Review (97), pp. 377-395.
60. Lazarus, R. 1966. Psychological Stress and the Coping Process, New York: McGraw-Hill.
61. Lazarus, R., and Folkman, S. 1984. Stress, Coping, and Adaptation, New York: Springer-Verlag.
62. Loch, K. D., Carr, H. H., and Warkentin, M. E. 1992. "Threats to Information Systems: Today's Reality, Yesterday's Understanding," MIS Quarterly (16:2), pp. 173-186.
63. Maddus, J. E., and Rogers, R. W. 1983. "Protection Motivation and Self-Efficacy: A Revised Theory of Fear Appeals and Attitude Change," Journal of Experimental Social Psychology (19), pp. 469-479.
64. Moore, G. C., and Benbasat, I. 1991. "Development of an Instrument to Measure the Perceptions of Adopting an Information Technology Innovation," Information Systems Research (2:3), pp. 192-239.
65. Naraine, R. 2005. "Two Years Later, Blaster Worm Still Squirming," eWeek.com, December 5 (http://www.eweek.com/c/a/Security/Two- Years-Later-Blaster-Worm-Still-Squirming/).
66. Nebylitsyn, V. D., and Gray, J. A. 1972. Biological Bases of Individual Behavior, New York: Academic Press.
67. Oliver, R. L., and Berger, P. K. 1979. "A Path Analysis of Preventive Health Care Decision Models," Journal of Consumer Research (6:2), pp. 113-122.
68. Pavlov, I. 1927. Conditioned Reflexes: An investigation into the Physiological Activity of the Cortex, New York: Dover.
69. Pechmann, C., Zhao, G., Goldberg, M. E., and Reibling, E. T. 2003. "What to Convey in Antismoking Advertisements for Adolescents: The Use of Protection Motivation Theory to Identify Effective Message Themes," Journal of Marketing (67), pp. 1-18.
70. Ray, M., and Wilkie, W. 1970. "Fear: The Potential of an Appeal Neglected by Marketing," Journal of Marketing (34:1), pp. 54-62.
71. Rippetoe, P. A., and Rogers, R. W. 1987. "Effects of Components of Protection-Motivation Theory on Adaptive and Maladaptive Coping with a Health Threat," Journal of Personality and Social Psychology (52:3), pp. 596-604.
72. th ed.), New York: The Free Press.
73. th ed.), New York: The Free Press.
74. Rogers, R. W. 1975. "A Protection Motivation Theory of Fear Appeals and Attitude Change," Journal of Psychology (91), pp. 93-114.
75. Rogers, R. W. 1983. "Cognitive and Physiological Process in Fear Appeals and Attitude Change: A Revised Theory of Protection Motivation," in Social Psychophysiology: A Source Book, R. Petty (ed.), New York: Guilford Press, pp. 153-176.
76. Rosenstock, I. M. 1974. "The Health Belief Model and Preventive Health Behavior," Health education Monographs (2), pp. 354-386.
77. Schultz, E. 2003. "Pandora's Box: Spyware, Adware, Autoexecution, and NGSCB," Computer & Security (22:5), pp. 366-367.
78. Shaw, G. 2003. "Spyware & Adware: The Risks Facing Businesses," Network Security (2003:9), pp. 12-14.
79. Sipior, J. C., Ward, B. T., and Roselli, G. R. 2005. "The Ethical and Legal Concerns of Spyware," Information Systems Management (22:2), pp. 39-49.
80. Skinner, B. F. 1953. Science and Human Behavior, NewYork: Macmillan.
81. Smith, H., Milberg, S., and Burke, S. 1996. "Information Privacy: Measuring Individuals' Concerns about Organizational Practices," MIS Quarterly (20:2), pp. 167-196.
82. Stafford, T. F., and Urbaczewski, A. 2004. "Spyware: The Ghost in the Machine," Communications of the AIS (14), pp. 291-306.
83. Steel, P., and Konig, C. J. 2006. "Integrating Theories of Motivation," A cademy of Management Review (31:4), pp. 889-913.
84. Steers, R. M., Mowday, R. T., and Shapiro, D. L. 2004. "The Future of Work Motivation Theory," Academy of Management Review (29:3), pp. 379-387.
85. Stone, E., Gardner, D., Gueutal, H., and McClure, S. 1983. "A Field Experiment Comparing Information-Privacy Values, Beliefs, and Attitudes across Several Types of Organizations," Journal of Applied Psychology (68:3), pp. 459-468.
86. Straub, D. 1990. "Effective IS Security: An Empirical Study," Information Systems Research (1:3), pp. 255-276.
87. Straub, D., and Nance, W. 1990. "Discovering and Disciplining Computer Abuse in Organizations: A Field Study," MIS Quarterly (14:1), pp. 45-62.
88. Straub, D., and Welke, R. 1998. "Coping with Systems Risk: Security Planning Models for Management Decision Making," MIS Quarterly (22:4), pp. 441-469.
89. Sutton, S. K., and Davidson, R. 1997. "Prefrontal Brain Asymmetry: A Biological Substrate of the Behavioral Approach and Inhibition Systems," Psychological Science (8:3), pp. 204-210.
90. Tanner, J. F., Day, E., and Crask, M. R. 1989. "Protection Motivation Theory: an Extension of Fear Appeals Theory in Communication," Journal of Business Research (19), pp. 267-276.
91. Tanner, J. F., Hunt, J. B., and Eppright, D. R. 1991. "The Protection Motivation Model: a Normative Model of Fear Appeals," Journal of Marketing (55), pp. 36-45.
92. Taylor, S., and Todd, P. A. 1995. "Understanding Information Technology Usage: A Test of Competing Models," Information Systems Research (6:2), pp. 144-177.
93. Thorndike, E. L. 1911. Animal Intelligence, New York: Macmillan.
94. Tooby, J., and Cosmides, L. 1990. "The Past Explains the Present: Emotional Adaptions and the Structure of Ancestral Environments," Ethology and Sociobiology (11), pp. 375-424.
95. Tversky, A., and Kahneman, D. 1974. "Judgment under Uncertainty: Heuristics and Biases," Science (185:4157), pp. 1124-1131.
96. Tversky, A., and Kahneman, D. 1992. "Advances in Prospect Theory: Cumulative Representation of Uncertainty," Journal of Risk and Uncertainty (5), pp. 297-323.
97. van der Heijden, H. 2004. "User Acceptance of Hedonic Information Systems," MIS Quarterly (28:4), pp. 695-704.
98. Venkatesh, V. 2000. "Determinants of Perceived Ease of Use: Integrating Control, Intrinsic Motivation, and Emotion into the Technology Acceptance Model," Information Systems Research (11:4), pp. 342-365.
99. Venkatesh, V., and Brown, S. 2001. "A Longitudinal Investigation of Personal Computers in Homes: Adoption Determinants and Emerging Challenges," MIS Quarterly (25:1), pp. 71-102.
100. Venkatesh, V., and Davis, F. D. 2000. "A Theoretical Extension of the Technology Acceptance Model: Four Longitudinal Field Studies," Management Science (46:2), pp. 186-204.
101. Venkatesh, V., Morris, M. G., Davis, G. B., and Davis, F. D. 2003. "User Acceptance of Information Technology: Toward a Unified View," MIS Quarterly (27:3), pp. 425-478.
102. Vroom, V. H. 1964. Work and Motivation, New York: Wiley.
103. Weinstein, N. D. 1993. "Testing Four Competing Theories of Health-Protective Behavior," Health Psychology (12:4), pp. 324-333.
104. Weinstein, N. D. 2000. "Perceived Probability, Perceived Severity, and Health-Protective Behavior," Health Psychology (19:1), pp. 65-74.
105. Westin, A. 1967. Privacy and Freedom, New York: Atheneum.
106. Whetten, D. 1989. "What Constitutes a Theoretical Contribution?," Academy of Management Review (14:4), pp. 190-195.
107. Wiener, N. 1948. Cybernetics: Control and Communication in the Animal and the Machine, Cambridge, MA: MIT Press.
108. Yao, R., Hanna, S. D., and Lindamood, S. 2004. "Changes in Financial Risk Tolerance, 1983-2001," Financial Services Review (13:4), pp. 249-266.
109. Zajonc, R. 1998. "Emotion," in The Handbook of Social Psychology, G. Lindzey (ed.), New York: McGraw-Hill.