Does one size fit all? Examining the differential effects of IS security countermeasures

Journal of Business Ethics

Volumn 89, Issue SUPPL. 1, 2009, Pages 59-71

  D'Arcy, John ^a   Hovav, Anat ^b  

^a UNIVERSITY OF NOTRE DAME   (United States)

^b Korea University   (South Korea)

Author keywords

Computer ethics; Computer self efficacy; Deterrence theory; Differential deterrence hypothesis; Information security management; Information systems security; Virtual work

Indexed keywords

EID: 67349280492     PISSN: 01674544     EISSN: 15730697     Source Type: Journal    
DOI: 10.1007/s10551-008-9909-7     Document Type: Article

References (51)

1. J. C. Anderson D. W. Gerbing 1988 Structural Equation Modeling in Practice: A Review and Recommended Two-Step Approach Psychological Bulletin 103 3 411 423
2. Azjen, I.: 1988, Attitudes, Personality, and Behavior (Dorsey Press, Chicago, IL)
3. R. Bachman R. Paternoster S. Ward 1992 The Rationality of Sexual Offending: Testing a Deterrence/Rational Choice Conception of Sexual Assault Law and Society Review 26 2 343 372
4. D. Banerjee T. P. Cronan T. W. Jones 1998 Modeling IT Ethics: A Study in Situational Ethics MIS Quarterly 22 1 31 60 (Pubitemid 128684580)
5. P. Y. K. Chau 2001 Influence of Computer Attitude and Self-Efficacy on IT Usage Behavior Journal of End User Computing 13 1 26 33 (Pubitemid 33761513)
6. Chin, W.: 1998, The Partial Least Squares Approach to Structural Equation Modeling', in G.A. Marcoulides (ed.), Modern Methods for Business Research (Lawrence Erlbaum Associates, Mahwah, NJ), pp. 295-336
7. W. Chin B. L. Marcolin P. R. Newsted 2003 A Partial Least Squares Latent Variable Modeling Approach for Measuring Interaction Effects: Results from a Monte Carlo Simulation Study and an Electronic-Mail Emotion/Adoption Study Information Systems Research 14 2 189 217 (Pubitemid 36924763)
8. D. R. Compeau C. A. Higgins 1995 Computer Self-Efficacy: Development of a Measure and Initial Test MIS Quarterly 19 2 189 211
9. J. D'Arcy A. Hovav 2007 Towards a Best Fit Between Organizational Security Countermeasures and Information Systems Misuse Behaviors Journal of Information System Security 3 2 3 30
10. G. Dhillon 1999 Managing and Controlling Computer Misuse Information Management & Computer Security 7 4 171 175 (Pubitemid 129654352)
11. Ernst and Young: 2003, Global Information Security Survey 2003 (New York, NY)
12. Finch, J. H., S. M. Furnell and P. S. Dowland: 2003, Assessing IT Security Culture: System Administrator and End-User', Proceedings of the ISOneWorld Conference, Las Vegas, NV
13. Foltz, C. B.: 2000, The Impact of Deterrent Countermeasures Upon Individual Intent to Commit Misuse: A Behavioral Approach', Unpublished Doctoral Dissertation, University of Arkansas, Fayetteville, AK
14. C. Fornell D. F. Larcker 1981 Evaluating Structural Equation Models with Unobservable Variables and Measurement Error Journal of Marketing Research 18 1 39 50
15. U. E. Gattiker H. Kelley 1999 Morality and Computers: Attitudes and Differences in Moral Judgments Information Systems Research 10 3 233 254
16. D. Gefen D. Straub 2005 A Practical Guide to Factorial Validity Using PLS-Graph: Tutorial and Annotated Example Communications of the AIS 16 5 91 109
17. R. D. Gopal G. L. Sanders 1997 Preventative and Deterrent Controls for Software Piracy Journal of Management Information Systems 13 4 29 47 (Pubitemid 127468258)
18. S. J. Harrington 1996 The Effect of Codes of Ethics and Personal Denial of Responsibility on Computer Abuse Judgments and Intentions MIS Quarterly 20 3 257 278 (Pubitemid 126698520)
19. C. Heath A. Tversky 1991 Preference and Belief: Ambiguity and Competence in Choice Under Uncertainty Journal of Risk and Uncertainty 4 5 28
20. J. A. Hoffer D. Straub 1989 The 9 to 5 Underground: Are You Policing Computer Crimes? Sloan Management Review 30 4 35 43
21. R. C. Hollinger T. P. Clark 1983 Deterrence in the Workplace: Perceived Certainty, Perceived Severity, and Employee Theft Social Forces 62 2 398 418
22. IDC Research: 2007, Worldwide Mobile Worker: 2007-2011 Forecast and Analysis', http://www.idc.com/getdoc.jsp?containerId=prUS21037208
23. InformationWeek: 2005, U.S. Information Security Research Report', United Business Media
24. A. Kankanhalli H. H. Teo B. C. Tan K. K. Wei 2003 An Integrative Study of Information Systems Security Effectiveness International Journal of Information Management 23 2 139 154
25. J. Kreie T. P. Cronan 1998 How Men and Women View Ethics Communications of the ACM 41 9 70 76 (Pubitemid 128447768)
26. N. J. Kruegar P. R. Dickson 1994 How Believing in Ourselves Increases Risk Taking: Perceived Self-Efficacy and Opportunity Recognition Decision Sciences 25 3 385 400 (Pubitemid 24816134)
27. S. M. Lee S. G. Lee S. Yoo 2004 An Integrative Model of Computer Abuse Based on Social Control and General Deterrence Theories Information and Management 41 6 707 718
28. L. N. K. Leonard T. P. Cronan 2001 Illegal, Inappropriate, and Unethical Behavior in an Information Technology Context: A Study to Explain Influences Journal of the Association for Information Systems 1 12 1 30
29. Lin, T.-C., M. H. Hsu, F. Y. Kuo and P. C. Sun: 1999, An Intention Model-Based Study of Software Piracy', Proceedings of the 32nd Hawaii International Conference on System Sciences, Maui, Hawaii
30. K. D. Loch S. Conger 1996 Evaluating Ethical Decision Making and Computer Use Communications of the ACM 39 7 74 83 (Pubitemid 126428137)
31. G. B. Magklaras S. M. Furnell P. J. Brooke 2006 Towards an Insider Threat Prediction Specification Language Information Management & Computer Security 14 4 361 381 (Pubitemid 44151553)
32. R. E. Mann G. Smart E. M. Stoduto E. Adlaf D. Vingilis R. Beirness R. Lamble M. Ashbridge 2003 The Effects of Drinking-Driving Laws: A Test of the Differential Deterrence Hypothesis Addiction 98 11 1531 1536 (Pubitemid 37373851)
33. S. Mann R. Varey W. Button 2000 An Exploration of the Emotional Impact of Teleworking via Computer-Mediated Communication Journal of Managerial Psychology 15 7 668 690
34. K. E. Pearlson C. S. Saunders 2001 There's No Place Like Home: Managing Telecommuting Paradoxes Academy of Management Executive 15 2 117 128 (Pubitemid 33717032)
35. Ping, R. A.: 2004, 'Testing Latent Variable Models with Survey Data', 2nd Edition. www.wright.edu/~robert.ping/lv1/toc1.htm )
36. E. E. Potter 2003 Telecommuting: The Future of Work, Corporate Culture, and American Society Journal of Labor Research 24 1 73 84 (Pubitemid 36256619)
37. Richardson, R.: 2007, CSI Computer Crime and Security Survey', Computer Security Institute (San Francisco, CA)
38. V. F. Sacco E. Zureik 1990 Correlates of Computer Misuse: Data from a Self-Reporting Sample Behaviour & Information Technology 9 5 353 369
39. B. Sheppard H. J. Hartwick P. R. Warshaw 1988 The Theory of Reasoned Action: A Meta-Analysis of Past Research with Recommendations for Modifications and Future Research Journal of Consumer Research 15 325 343
40. M. Silberman 1976 Towards a Theory of Criminal Deterrence American Sociological Review 41 3 442 461
41. D. W. Straub 1990 Effective IS Security: An Empirical Study Information Systems Research 1 3 255 276
42. A. E. Tenbrunsel D. M. Messick 1999 Sanctioning Systems, Decision Frames, and Cooperation Administrative Science Quarterly 44 4 684 707
43. Tittle, C. R: 1980, Sanctions and Social Deviance: The Question of Deterrence', (Praeger, NY)
44. M. M. Watad F. J. DiSanzo 2000 Case Study: The Synergism of Telecommuting and Office Automation Sloan Management Review 41 2 85 97
45. F. M. Weaver J. S. Carroll 1985 Crime Perceptions in a Natural Setting by Expert and Novice Shoplifters Social Psychology Quarterly 48 4 349 359
46. M. E. Whitman 2003 Enemy at the Gate: Threats to Information Security Communications of the ACM 46 8 91 95
47. Wiant, T. L.: 2003, Policy and Its Impact on Medical Record Security', Unpublished Doctoral Dissertation, University of Kentucky, Lexington, KY
48. B. M. Wiesenfeld S. Raghuram R. Garud 1999 Communication Patterns as Determinants of Organizational Identification in a Virtual Organization Organization Science 10 6 777 790
49. K. Williams 1992 Social Sources of Marital Violence and Deterrence: Testing an Integrated Theory of Assaults Between Partners Journal of Marriage and Family 54 3 620 629
50. G. Wyatt 1990 Risk-Taking and Risk-Avoiding Behavior: The Impact of Some Dispositional and Situational Variables The Journal of Psychology 124 4 437 447
51. Zimbardo, P. G.: 1969, The Human Choice: Individuation, Reason, and Order Versus Deindividuation, Impulse, and Chaos', in W.J. Arnold and D. Levine (eds.), Nebraska Symposium on Motivation (University of Nebraska Press, Lincoln, NE)