The more secure the better? A study of information security readiness

Industrial Management and Data Systems

Volumn 111, Issue 4, 2011, Pages 570-588

  Sun, Jun ^a   Ahluwalia, Punit ^a   Koong, Kai S ^a  

^a UNIVERSITY OF TEXAS PAN AMERICAN   (United States)

Author keywords

Data security; Information technology; Risk management

Indexed keywords

AFFECTIVE RESPONSE; COVARIATES; DATA SECURITY; DESIGN/METHODOLOGY/APPROACH; FACTORIAL DESIGN; INDIVIDUAL DIFFERENCES; INFORMATION SECURITY; LABORATORY EXPERIMENTS; MODERATING EFFECT; MULTI-GROUP; NON-LINEAR RELATIONSHIPS; SECURITY LEVEL; SECURITY MEASURE; SECURITY METHODS; STRUCTURAL EQUATION MODELING; UNDERGRADUATE STUDENTS; USER ATTITUDES; USER CHARACTERISTICS; USER TRAINING;

CRITICALITY (NUCLEAR FISSION); INFORMATION TECHNOLOGY; RISK ANALYSIS; RISK MANAGEMENT; STUDENTS;

SECURITY OF DATA;

EID: 79955704302     PISSN: 02635577     EISSN: None     Source Type: Journal    
DOI: 10.1108/02635571111133551     Document Type: Article

References (51)

1. Adams, A. and Sasse, M.A. (1999), "Users are not the enemy", Communications of the ACM, Vol. 42 No. 12, pp. 41-6. (Pubitemid 129568045)
2. Albrechtsen, E. (2007), "A qualitative study of users' view on information security", Computers and Security, Vol. 26, pp. 276-89. (Pubitemid 46873753)
3. Ashton, R. and Kramer, S. (1980), "Students as surrogates in behavioral accounting research: Some evidence", Journal of Accounting Research, Vol. 18 No. 1, pp. 1-15.
4. Beltramini, R. (1983), "Student surrogates in consumer research", Journal of the Academy of Marketing Science, Vol. 11 No. 4, p. 438.
5. Benbasat, I. and Barki, H. (2007), "Quo vadis, TAM", Journal of the Association for Information Systems, Vol. 8 No. 4, pp. 211-8.
6. Besnard, D. and Arief, B. (2004), "Computer security impaired by legitimate users", Computers and Security, Vol. 23, pp. 229-37.
7. Birnberg, J. and Nath, R. (1968), "Laboratory experimentation in accounting research", Accounting Review, Vol. 43 No. 1, pp. 38-45.
8. Breckler, S.J. (1984), "Empirical validation of affect, behavior, and cognition as distinct components of attitude", Journal of Personality and Social Psychology, Vol. 47 No. 6, pp. 1191-205.
9. Byrne, B. (1994), Structural Equation Modeling with EQS and EQS/Windows: Basic Concepts, Applications, and Programming, Sage, Thousand Oaks, CA.
10. Calder, B.J., Phillips, L.W. and Tybout, A.M. (1981), "Designing research for application", Journal of Consumer Research, Vol. 8, pp. 197-207.
11. Chen, Y. and Barnes, S. (2007), "Initial trust and online buyer behaviour", Industrial Management & Data Systems, Vol. 107 No. 1, p. 21.
12. Crites, S.L., Fabrigar, L.R. and Petty, R.E. (1994), "Measuring the affective and cognitive properties of attitudes: Conceptual and methodological issues", Personality and Social Psychology Bulletin, Vol. 20 No. 6, pp. 619-34.
13. Cronbach, L. (1947), "Test reliability: Its meaning and determination", Psychometrika, Vol. 12 No. 1, pp. 1-16.
14. Davis, F. (1989), "Perceived usefulness, perceived ease of use, and user acceptance of information technology", MIS Quarterly, Vol. 13 No. 3, pp. 319-40.
15. Davis, F.D., Bagozzi, R.P. and Warshaw, P.R. (1989), "User acceptance of computer technology: A comparison of two theoretical models", Management Science, Vol. 35 No. 8, pp. 982-1003.
16. Dotson, D.S. (2007), "Information security resources: A selected annotated bibliography", Science & Technology Libraries, Vol. 27 No. 3, pp. 29-51. (Pubitemid 47337411)
17. Eagly, H. and Chaiken, S. (1993), The Psychology of Attitudes, Harcourt Brace Jovanovich College Publishers, Fort Worth, TX.
18. Fagley, N. and Miller, P. (1990), "The effect of framing on choice: Interactions with risk-taking propensity, cognitivestyle, and sex", Personality and Social Psychology Bulletin, Vol. 16 No. 3, p. 496.
19. Flavian, C. and Guinaliu, M. (2006), "Consumer trust, perceived security and privacy policy", Industrial Management & Data Systems, Vol. 106 No. 5, pp. 601-20.
20. Heise, D.R. (1970), "Causal inference from panel data", Sociological Methodology, Vol. 2, pp. 3-27.
21. Huang, S., Lee, C. and Kao, A. (2006), "Balancing performance measures for information security management: A balanced scorecard framework", Industrial Management & Data Systems, Vol. 106 Nos 1/2, pp. 242-55.
22. Jain, A.K., Ross, A. and Pankati, S. (2006), "Biometrics: A tool for information security", IEEE Transactions on Information Forensics and Security, Vol. 1 No. 2, pp. 125-43. (Pubitemid 43824625)
23. Jöreskog, K., Sörbom, D., Magidson, J. and Cooley, W. (1979), Advances in Factor Analysis and Structural Equation Models, Abt Books, Cambridge, MA.
24. Katz, D. and Stotland, E. (1959), Psychology: A Study of a Science, McGraw-Hill, New York, NY.
25. Kerlinger, F.N. (1986), Foundations of Behavioral Research, Holt Rinehart and Winston Inc., Fort Worth, TX.
26. Klien, D.V. (1990), "Foiling the cracker: A survey of, and improvements to, password security", Proceedings of the USENIX UNIX Security Workshop, Portland.
27. Knight, S., Buffett, S. and Hung, P. (2007), "Special issue on privacy, security and trust technologies and e-business services. Guest editors' introduction", International Journal of Information Security, Vol. 6 No. 5, pp. 285-6. (Pubitemid 47299555)
28. Kock, N. (2005), "Media richness or media naturalness? The evolution of our biological communication apparatus and its influence on our behavior toward e-communication tools", IEEE Transactions on Professional Communication, Vol. 48 No. 2, pp. 117-30. (Pubitemid 40871091)
29. Kothandapani, V. (1971), "Validation of feeling, belief, and intention to act as three components of attitude and their contribution to prediction of contraceptive behavior", Journal of Personality and Social Psychology, Vol. 19 No. 3, pp. 321-33.
30. Liyanarachchi, G. and Milne, M. (2005), "Comparing the investment decisions of accounting practitioners and students: An empirical study on the adequacy of student surrogates", In Accounting Forum, Vol. 29, pp. 121-35. (Pubitemid 40382442)
31. McMaster, T. and Wastell, D.G. (2005), "The agency of hybrids: Overcoming the symmetrophobic block", Scandinavian Journal of Information Systems, Vol. 17 No. 1, pp. 175-82.
32. Maxwell, S. and Delaney, H. (2004), Designing Experiments and Analyzing Data: A Model Comparison Perspective, Lawrence-Erlbaum, Mahwah, NJ.
33. Nicholson, N., Soane, E., Fenton-O'Creevy, M. and Willman, P. (2005), "Personality and domain-specific risk taking", Journal of Risk Research, Vol. 8 No. 2, pp. 157-76. (Pubitemid 43203546)
34. Norberg, P., Horne, D. and Horne, D. (2007), "The privacy paradox: Personal information disclosure intentions versus behaviors", Journal of Consumer Affairs, Vol. 41 No. 1, pp. 100-26.
35. Osgood, C.E., Suci, G.J. and Tannenbaum, P.H. (1957), The Measurement of Meaning, University of Illinois Press, Urbana, IL.
36. Ostrom, T.M. (1969), "The relationship between the affective, behavioral, and cognitive components of attitude", Journal of Experimental Social Psychology, Vol. 15 No. 1, pp. 12-30.
37. Peterson, R. (2001), "On the use of college students in social science research: Insights from a second-order meta-analysis", Journal of Consumer Research, Vol. 28 No. 3, pp. 450-61. (Pubitemid 33403469)
38. Post, G.V. and Kagan, A. (2007), "Evaluating information security tradeoffs: Restricting access can interfere with user tasks", Computers and Security, Vol. 26, pp. 253-64.
39. Proctor, R., Lien, M., Schultz, E. and Salvendy, G. (2002), "Improving computer security for authentication of users: Influence of proactive password restrictions", Behavior Research Methods, Instruments, & Computers, Vol. 34 No. 2, pp. 163-9.
40. Riddle, B.L., Miron, M.S. and Semo, J.A. (1989), "Passwords in use in a university timesharing environment", Computers and Security, Vol. 8 No. 7, pp. 569-79.
41. Rosenberg, M.J. and Hovland, C.I. (1960), Attitude Organization and Change: An Analysis of Consistency, Yale University Press, New Haven, CT.
42. Schultz, E.E. (2007), "Research on usability in information security", Computer Fraud & Security, Vol. 6, pp. 8-10. (Pubitemid 47009036)
43. Smith, S. (2002), "The role of social cognitive career theory in information technology based academic performance", Information Technology Learning and Performance Journal, Vol. 20, pp. 1-10.
44. Stine, K., Barker, W.C., Fahlsing, J. and Gulick, J. (2008), Guide for Mapping Types of Information and Information Systems to Security Categories, Vol. I, NIST Special Publication 800-60, Gaithersburg, MD.
45. Sun, J. and Ahluwalia, P. (2008), "How users respond to authentication methods - a study of security readiness", Proceedings Fourteenth Americas Conference on Information Systems, Toronto, Canada.
46. Swartz, N. (2004), "Survey accesses the state of information security worldwide", Information Management Journal, Vol. 38 No. 1.
47. Thomson, K.-L. and von Solms, R. (1998), "Information security awareness: Educating our users effectively", Information Management & Computer Security, Vol. 6 No. 4, pp. 167-73. (Pubitemid 128623423)
48. Venkatesh, V., Morris, M.G., Davis, G.B. and Fred, D. (2003), "User acceptance of information technology: Toward a unified view", MIS Quarterly, Vol. 27 No. 3, pp. 425-78.
49. Warkentin, M., Davis, K. and Bekkering, E. (2004), "Introducing the check-off password system (COPS): An advancement in user authentication methods and information security", Journal of Organizational and End User Computing, Vol. 16 No. 3, pp. 41-58.
50. Zanna, M.P. and Rempel, J.K. (1988), The Social Psychology of Knowledge, Cambridge University Press, New York, NY.
51. Zuckerman, M. and Kuhlman, D. (2000), "Personality and risk-taking: Common bisocial factors", Journal of Personality, Vol. 68 No. 6, pp. 999-1029.