Impact of perceived technical protection on security behaviors

Information Management and Computer Security

Volumn 17, Issue 4, 2009, Pages 330-340

  Zhang, Jie ^a   Reithel, Brian J ^b   Li, Han ^c  

^a VIRGINIA STATE UNIVERSITY   (United States)

^b UNIVERSITY OF MISSISSIPPI   (United States)

^c School of Business   (United States)

Author keywords

Behaviour; Data security; Risk analysis

Indexed keywords

BEHAVIORAL INTENTION; COMPENSATION EFFECTS; DATA ANALYSIS; DATA SECURITY RISKS; DESIGN/METHODOLOGY/APPROACH; EMPIRICAL EXAMINATION; END-USERS; INFORMATION SECURITY; ONLINE SURVEYS; PERCEIVED BEHAVIORAL CONTROL; RESEARCH MODELS; SECURITY POLICY; SECURITY PRACTICE; SECURITY TRAINING; SIGNIFICANT IMPACTS; TECHNICAL PROTECTION; TECHNICAL SECURITY; THEORY OF PLANNED BEHAVIOR;

DATA HANDLING; RISK ANALYSIS; RISK ASSESSMENT; SAFETY FACTOR; SECURITY SYSTEMS; SURVEYS;

NETWORK SECURITY;

EID: 76649137264     PISSN: 09685227     EISSN: None     Source Type: Journal    
DOI: 10.1108/09685220910993980     Document Type: Article

References (36)

1. Adams, J. (1999), Cars, Cholera, and Cows: The Management of Risk and Uncertainty, available at: www.cato.org/pubs/pas/pa335.pdf (accessed April 6, 2009).
2. Ajzen, I. (1985), "From intentions to action: a theory of planned behavior", in Kukl, J. and Beckman, J. (Eds), Action Control: From Cognitions to Behaviors, Springer, New York, NY, pp. 11-39.
3. Ajzen, I. (1991), "The theory of planned behavior", Organizational Behavior and Human Decision Processes, Vol.50 No.2, pp. 179-211.
4. Ajzen, I. (2002), "Perceived behavioral control, self-efficacy, locus of control, and the theory of planned behavior", Journal of Applied Social Psychology, Vol.32 No.4, pp. 665-683
5. Armitage, C.J. and Conner, M. (1999a), "Distinguishing perceptions of control from self-efficacy: predicting consumption of a low-fat diet using the theory of planned behavior", Journal of Applied Social Psychology, Vol.29 No.1, pp. 72-90.
6. Armitage, C.J. and Conner, M. (1999b), "The theory of planned behaviour: assessment of predictive validity and 'perceived control'", British Journal of Social Psychology, Vol.38 No.1, pp. 35-54.
7. Bagozzi, R.P. and Yi, Y. (1988), "On the evaluation of structural equation models", Journal of the Academy of Marketing Science, Vol.16 No.1, pp. 74-94.
8. Campbell, K., Gordon, L.A., Loeb, M.P. and Zhou, L. (2003), "The economic cost of publicly announced information security breaches: empirical evidence from the stock market", Journal of Computer Security, Vol.11 No.3, pp. 431-448
9. Chin, W.W., Marcolin, B.L. and Newsted, P.R. (2003), "A partial least squares latent variable modeling approach for measuring interaction effects: results from a Monte Carlo simulation study and an electronic mail adoption study", Information Systems Research, Vol.14 No.2, pp. 189-217.
10. DTT (2009), Protecting What Matters: The 6th Annual Global Security Survey, available at: www. deloitte.com/dtt/cda/doc/content/dtt-fsi- GlobalSecuritySurvey-0901.pdf (accessed April 6, 2009).
11. Fornell, C. and Larcker, D. (1981), "Evaluating structural equation models with unobservable variables and measurement error", Journal of Marketing Research, Vol.18 No.1, pp. 39-50.
12. Fosser, S., Saetermo, I. and Sagberg, F. (1997), "An investigation of behavioral adaptation to airbags and antilock brakes among taxi drivers", Accident Analysis and Prevention, Vol.29 No.3, pp. 293-302.
13. Gefen, D. and Straub, D. (2005), "A practical guide to factorial validity using PLS-Graph: Tutorial and annotated example", Communications of the AIS, Vol.16 No.5, pp. 91-109.
14. Hawkins, S., Yen, D.C. and Chou, D.C. (2000), "Awareness and challenges of internet security", Information Management & Computer Security, Vol.8 No.3, pp. 131-143
15. Hillhouse, J.J., Adler, C.M., Drinnon, J. and Turrist, R. (1997), "Application of Ajzen's theory of planned behavior to predict sunbathing, tanning salon use, and sunscreen use intentions and behaviors", Journal of Behavioral Medicine, Vol.20 No.4, pp. 365-378
16. Lau, V.C.S., Au, W.T. and Ho, J.M.C. (2003), "A qualitative and quantitative review of antecedents of counterproductive behavior in organizations", Journal of Business and Psychology, Vol.18 No.1, pp. 73-99.
17. Lee, J. and Lee, Y. (2002), "A holistic model of computer abuse within organizations", Information Management & Computer Security, Vol.10 No.2, pp. 57-63.
18. McCumber, J. (1991), "Information systems security: a comprehensive model", Proceedings of the 14th National Computer Security Conference, Baltimore, MD.
19. Maconachy, W.V., Schou, C.D., Ragsdale, D. and Welch, D. (2001), "A model for information assurance: an integrated approach", Proceedings of the 2001 IEEE Workshop on Information Assurance and Security, United State Military Academy, IEEE, West Point, NY, pp. 306-310
20. Ng, B.Y., Kankanhalli, A. and Xu, Y.C. (2008), "Studying users' computer security behavior: a health belief perspective", Decision Support Systems, Vol.46 No.4, pp. 815-825
21. Pahnila, S., Siponen, M. and Mahmood, A. (2007), "Employees' behavior towards IS security policy compliance", Proceedings of the 40th Hawaii International Conference on System Sciences, 2007, IEEE, Hawaii.
22. Parker, D.B. (1983), Fighting Computer Crime, Scribner, New York, NY.
23. Peltzman, S. (1975), "The effects of automobile safety regulation", Journal of Political Economy, Vol.83 No.4, pp. 677-725.
24. Randall, D.M. and Gibson, A.M. (1991), "Ethical decision making in the medical profession: an application of the theory of planned behavior", Journal of Business Ethics, Vol.10 No.2, pp. 111-122
25. Schlarman, S. (2001), "The people, policy, technology (PPT) model: core elements of the security process", Information Security Journal, Vol.10 No.5, pp. 1-6.
26. Siponen, M.T. (2000), "A conceptual foundation for organizational information security awareness", Information Management & Computer Security, Vol.8 No.1, pp. 31-41.
27. Siponen, M.T. (2001), "Five dimensions of information security awareness", ACM SIGCAS Computers and Society, Vol.31 No.2, pp. 24-29
28. Spruit, M.E.M. (1998), "Competing against human failing", Proceedings of the IFIP TC11 14th International Conference on Information Security (SEC '98), Vienna/Budapest.
29. Stanton, J.M., Mastrangelo, P.R., Stam, K.R. and Jolton, J. (2004), "Behavioral information security: two end user survey studies of motivation and security practices", Proceedings of the Tenth Americas Conference on Information Systems, New York, NY.
30. Stewart, A. (2004), "On risk: perception and direction", Computers & Security, Vol.23 No.5, pp. 362-370
31. Thomson, M.E. and von Solms, R. (1998), "Information security awareness: educating your users effectively", Information Management & Computer Security, Vol.6 No.4, pp. 167-173
32. van Ryn, M. and Vinokur, A.D. (1990), "The role of experimentally manipulated self-efficacy in determining job-search behavior among the unemployed", unpublished manuscript, Institute for Social Research, University of Michigan, Ann Arbor, MI.
33. Venkatesh, V. and Davis, F.D. (2000), "A theoretical extension of the technology acceptance model: four longitudinal field studies", Management Science, Vol.46 No.2, pp. 186-204.
34. von Solms, R. and von Solms, B. (2004), "From policies to culture", Computers & Security, Vol.23 No.4, pp. 275-279
35. West, R. (2008), "The psychology of security", Communications of the ACM, Vol.51 No.4, pp. 34-40.
36. Workman, M. and Gathegi, J. (2007), "Punishment and ethics deterrents: a study of insider security contravention", Journal of the American Society for Information Science and Technology, Vol.58 No.2, pp. 212-222