Understanding the mindset of the abusive insider: An examination of insiders' causal reasoning following internal security changes

Computers and Security

Volumn 30, Issue 6-7, 2011, Pages 486-497

  Posey, Clay ^a   Bennett, Rebecca J ^b   Roberts, Tom L ^b  

^a UNIVERSITY OF ARKANSAS AT LITTLE ROCK   (United States)

^b LOUISIANA TECH UNIVERSITY   (United States)

Author keywords

Attributed trust; Attributions; Behavioral information security; Causal reasoning; Computer abuse

Indexed keywords

ATTRIBUTED TRUST; ATTRIBUTIONS; BEHAVIORAL INFORMATION SECURITY; CAUSAL REASONING; COMPUTER ABUSE;

SECURITY OF DATA;

EID: 80051795854     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2011.05.002     Document Type: Article

References (108)

1. L.Y. Abramson, M.E. Seligman, and J.D. Teasdale Learned helplessness in humans: critique and reformulation Journal of Abnormal Psychology 87 1978 49 74 (Pubitemid 8303954)
2. G.S. Alder, T.W. Noel, and M.L. Ambrose Clarifying the effects of Internet monitoring on job attitudes: the mediating role of employee trust Information & Management 43 2006 894 903 (Pubitemid 44548301)
3. B.J. Alge Effects of computer surveillance on perceptions of privacy and procedural justice Journal of Applied Psychology 86 2001 797 804 (Pubitemid 33570900)
4. B.J. Alge, J. Greenberg, and C.T. Brinsfield An identity-based model of organizational monitoring: integrating information privacy and organizational justice J.J. Martocchio, Research in personnel and human resources management 2006 JAI Press Oxford, UK 71 135 (Pubitemid 43865898)
5. M.L. Ambrose, and M. Schminke Organization structure as a moderator of the relationship between procedural justice, interactional justice, perceived organizational support, and supervisory trust Journal of Applied Psychology 88 2003 295 305 (Pubitemid 36507873)
6. M.L. Ambrose, T.W. Noel, and G.S. Alder The effect of advance notice, justification, and trust on employee reactions to Internet monitoring 2002 Annual Meeting of the Academy of Management Denver, CO
7. M.L. Ambrose, M.A. Seabright, and M. Schminke Sabotage in the workplace: the role of organizational injustice Organizational Behavior and Human Decision Processes 89 2002 947 965
8. J.C. Anderson The validity of haire's shopping list projective technique Journal of Marketing Research 15 1978 644 649
9. S. Aryee, P.S. Budhwar, and Z.X. Chen Trust as a mediator of the relationship between organizational justice and work outcomes: test of a social exchange model Journal of Organizational Behavior 23 2002 267 285 (Pubitemid 37282924)
10. R.J. Bennett, and S.L. Robinson Development of a measure of workplace deviance Journal of Applied Psychology 85 2000 349 360
11. A.P. Brief, M.J. Burke, J.M. George, B.S. Robinson, and J. Webster Should negative affectivity remain an unmeasured variable in the study of job stress? Journal of Applied Psychology 73 1988 193 198
12. J. Brockner, and L. Adsit The moderating impact of sex on the equity-satisfaction relationship: a field study Journal of Applied Psychology 71 1986 585 590
13. T. Burns, and G.M. Stalker The management of innovation 1961 Tavistock London
14. B.J. Calder, and R.E. Burnkrant Interpersonal influence on consumer behavior: an attribution theory approach Journal of Consumer Research 4 1977 29 38
15. J. Child Organizational structure, environment and performance: the role of strategic choice Sociology 6 1972 1 22
16. J. Choobineh, G. Dhillon, M.R. Grimaila, and J. Rees Management of information security: challenges and research directions Communications of the Association for Information Systems 20 2007 958 971
17. M.C. Clark, and R.L. Payne The nature and structure of workers' trust in management Journal of Organizational Behavior 18 1997 205 224 (Pubitemid 127173183)
18. J. Cohen, and P. Cohen Applied multiple regression for the behavioral sciences 1983 Lawrence Erlbaum Hillsdale, NJ
19. J.A. Colquitt, B.A. Scott, and J.A. LePine Trust, trustworthiness, and trust propensity: a meta-analytic test of their unique relationships with risk taking and job performance Journal of Applied Psychology 92 2007 909 926
20. J.G. Covin, and D.P. Slevin Strategic management of small firms in hostile and benign environments Strategic Management Journal 10 1989 75 87
21. Cyber-Ark Cyber-ark snooping survey 2010 Cyber-Ark Newton, MA
22. J. D'Arcy, A. Hovav, and D. Galletta User awareness of security countermeasures and its impact on information systems misuse: a deterrence approach Information Systems Research 20 2009 79 98
23. A. Da Veiga, and J.H.P. Eloff A framework and assessment instrument for information security culture Computers & Security 29 2010 196 207
24. M.T. Dasborough, and N.M. Ashkanasy Emotion and attribution of intentionality in leader-member relationships The Leadership Quarterly 13 2002 615 634
25. D.M. DeJoy Managing safety in the workplace: an attribution theory analysis and model Journal of Safety Research 25 1994 3 17
26. G. Dhillon Violation of safeguards by trusted personnel and understanding related information security concerns Computers & Security 20 2001 165 172 (Pubitemid 32366361)
27. G. Dhillon, and J. Backhouse Information system security management in the new millennium Communications of the ACM 43 2000 125 128
28. G. Dhillon, and S. Moores Computer crimes: theorizing about the enemy within Computers & Security 20 2001 715 723 (Pubitemid 34012849)
29. G. Dhillon, and G. Torkzadeh Value-focused assessment of information system security in organizations Information Systems Journal 16 2006 293 314 (Pubitemid 43830082)
30. M.T. Dlamini, J.H.P. Eloff, and M.M. Eloff Information security: the moving target Computers & Security 28 2009 189 198
31. K.A. Dodge Translational science in action: hostile attributional style and the development of aggressive behavior problems Development and Psychopathology 18 2006 791 814 (Pubitemid 44445162)
32. S.C. Douglas, and M.J. Martinko Exploring the role of individual differences in the prediction of workplace aggression Journal of Applied Psychology 86 2001 547 559 (Pubitemid 33570877)
33. A.H. Eagly, and V.J. Steffen Gender and aggressive behavior: a meta-analytic review of the social psychological literature Psychological Bulletin 100 1986 309 330
34. S. Fein, and J.L. Hilton Judging others in the shadow of suspicion Motivation and Emotion 18 1994 167 198
35. D.L. Ferrin, M.C. Bligh, and J.C. Kohles Can i trust you to trust me? A theory of trust, monitoring, and cooperation in interpersonal and intergroup relationships Group & Organization Management 32 2007 465
36. Gartner Gartner perspective: IT spending 2010 Gartner Research 2009
37. S. Graham A review of attribution theory in achievement contexts Educational Psychology Review 3 1991 5 39
38. J. Greenberg Employee theft as a reaction to underpayment inequity: the hidden cost of pay cuts Journal of Applied Psychology 75 1990 561 568
39. J. Greenberg Stealing in the name of justice: informational and interpersonal moderators of theft reactions to underpayment inequity Organizational Behavior and Human Decision Processes 54 1993 81 103
40. J. Greenberg, and B.J. Alge Aggressive reactions to workplace injustice R.W. Griffin, A. O'Leary-Kelly, J. Collins, Dysfunctional behavior in organizations: violent behaviors in organizations 1998 JAI Press Greenwich, CT 83 117
41. J.F. Hair, W. Black, B. Babin, R.E. Anderson, and R.L. Tatham Multivariate data analysis 2006 Pearson Education Upper Saddle River, NJ
42. C. Handy Trust and the virtual organization Harvard Business Review 70 1995 40 50
43. F. Heider The psychology of interpersonal relations 1958 Wiley New York, NY
44. J.W. Henry, and C. Campbell A comparison of the validity, predictiveness, and consistency of a trait versus situational measure of attributions M.J. Martinko, Attribution theory: an organizational perspective 1995 St. Lucie Press Delray Beach, FL 35 51
45. S. Kaplan, J.C. Bradley, J.N. Luchman, and D. Haynes On the role of positive and negative affectivity in job performance: a meta-analytic investigation Journal of Applied Psychology 94 2009 162
46. H.H. Kelley, and J.L. Michela Attribution theory and research Annual Review of Psychology 31 1980 457 501
47. R.L. Kent, and M.J. Martinko The development and evaluation of a scale to measure organizational attributional style M.J. Martinko, Attribution theory: an organizational perspective 1995 St. Lucie Press Delray Beach, FL 53 75
48. R.L. Kent, and M.J. Martinko The measurement of attributions in organizational research M.J. Martinko, Attribution theory: an organizational perspective 1995 St. Lucie Press Delray Beach, FL 17 34
49. P.N. Khandwalla The design of organizations 1977 Harcourt Brace Jovanovich New York
50. K.J. Knapp, T.E. Marshall, R.K. Rainer, and F.N. Ford Information security: management's effect on culture and policy Information Management & Computer Security 14 2006 24 36 (Pubitemid 43292966)
51. P. Kollock The emergence of exchange structures: an experimental study of uncertainty, commitment, and trust American Journal of Sociology 100 1994 313 345
52. M.A. Korsgaard, S.E. Brodt, and E.M. Whitener Trust in the face of conflict: the role of managerial trustworthy behavior and organizational context Journal of Applied Psychology 87 2002 312 319
53. A.G. Kotulic, and J.G. Clark Why there aren't more information security research studies Information & Management 41 2004 597 607
54. R.M. Kramer Trust and distrust in organizations: emerging perspectives, enduring questions Annual Review of Psychology 50 1999 569 598
55. R. Krishnan, X. Martin, and N.G. Noorderhaven When does trust matter to alliance performance? Academy of Management Journal 49 2006 894
56. R.N. Laczniak, T.E. DeCarlo, and S.N. Ramaswami Consumers' responses to negative word-of-mouth communication: an attribution theory perspective Journal of Consumer Psychology 11 2001 57 73
57. S.M. Lee, S.G. Lee, and S. Yoo An integrative model of computer abuse based on social control and general deterrence theories Information & Management 41 2004 707 718
58. R. Leifer, and G.P. Huber Relations among perceived environmental uncertainty, organization structure, and boundary-spanning behavior Administrative Science Quarterly 22 1977 235 247
59. K.D. Loch, H.H. Carr, and M.E. Warkentin Threats to information systems: today's reality, yesterday's understanding MIS Quarterly 16 1992 173 186
60. M.J. Martinko The nature and function of attribution theory within the organizational sciences M.J. Martinko, Attribution theory: an organizational perspective 1995 St. Lucie Press Delray Beach, FL 3 6
61. M.J. Martinko, M.J. Gundlach, and S.C. Douglas Toward an integrative theory of counterproductive workplace behavior: a causal reasoning perspective International Journal of Selection and Assessment 10 2002 36 50
62. M.J. Martinko, S.C. Douglas, P. Harvey, and C. Joseph Managing organizational aggression R.E. Kidwell, C.L. Martin, Managing organizational deviance 2005 Sage Thousand Oaks, CA 237 260
63. M.J. Martinko, S.C. Douglas, P. Harvey, and M.J. Gundlach Understanding and managing organizational deviance: a causal reasoning perspective S.W. Gilliland, D.D. Steiner, D.P. Skarlicki, Managing social and ethical issues in organizations 2007 Information Age 253 294
64. M.J. Martinko, S.E. Moss, S.C. Douglas, and N. Borkowski Anticipating the inevitable: when leader and member attribution styles clash Organizational Behavior and Human Decision Processes 104 2007 158 174
65. R.C. Mayer, J.H. Davis, and F.D. Schoorman An integrative model of organizational trust Academy of Management Review 1995 709 734
66. E. McAuley, T.E. Duncan, and D.W. Russell Measuring causal attributions: the revised causal dimension scale (cdsii) Personality and Social Psychology Bulletin 18 1992 566 573
67. D.G. Mick Are studies of dark side variables confounded by socially desirable responding? The case of materialism Journal of Consumer Research 23 1996 106 119
68. J.E. Moore Why is this happening? A causal attribution approach to work exhaustion consequences Academy of Management Review 25 2000 335 349
69. A.P. Moore, D.M. Cappelli, and R.F. Trzeciak The 'big picture' of insider IT sabotage across U.S. critical infrastructures 2008 Software Engineering Institute: Carnegie Mellon University
70. J.C. Nunnally Psychometric theory 1978 McGraw-Hill New York
71. S. Peters S. Peters, 14th annual CSI computer crime and security survey 2009 Computer Security Institute New York, NY
72. C. Peterson, A. Semmel, C. von Baeyer, L.Y. Abramson, G.I. Metalsky, and M.E.P. Seligman The attributional style questionnaire Cognitive Therapy and Research 6 1982 287 299
73. L. Ponemon Fourth annual US cost of data breach study 2009 Ponemon Institute Traverse City, MI
74. Ponemon First annual cost of cyber crime study: benchmark study of U.S. Companies 2010 Ponemon Institute Traverse City, MI p. 1-22
75. Posey C. Protection-motivated behaviors of organizational insiders [Dissertation]. Ruston, LA: Louisiana Tech University; 2010.
76. C. Posey, R.J. Bennett, T.L. Roberts, and P.B. Lowry When computer monitoring backfires: invasion of privacy and organizational injustice as precursors to computer abuse Journal of Information System Security 2011 7
77. L. Rhoades, and R. Eisenberger Perceived organizational support: a review of the literature Journal of Applied Psychology 87 2002 698 714
78. D. Robertson, and R. Joselyn Projective techniques in research Journal of Advertising Research 14 1974 27 31
79. S.L. Robinson Trust and breach of the psychological contract Administrative Science Quarterly 41 1996 574 599
80. Salamon S, Robinson SL. Does trust climate deter workplace deviance? An organizational level analysis. annual meeting of the Academy of Management. Denver, CO, 2002.
81. L.K. Scheer, N. Kumar, and J.E.M. Steenkamp Reactions to perceived inequity in US and Dutch interorganizational relationships Academy of Management Journal 46 2003 303 316 (Pubitemid 36837118)
82. J. Shropshire A canonical analysis of intentional information security breaches by insiders Information Management & Computer Security 17 2009 296 310
83. B. Simons, and E.H. Spafford Risks of total surveillance Communications of the ACM 46 2003 120
84. Siponen M, Willison R. A critical assessment of IS security research between 1990 and 2004. 15th European Conference on Information Systems. St. Gallen, Switzerland 2007. p. 1551-9.
85. R.M. Sorrentino, J.G. Holmes, S.E. Hanna, and A. Sharp Uncertainty orientation and trust in close relationships: individual differences in cognitive styles Journal of Personality and Social Psychology 68 1995 314 327
86. J.M. Stanton, and K.R. Stam The visible employee: using workplace monitoring and surveillance to protect information assets-without compromising employee privacy or trust 2006 Information Today, Inc. Medford, NJ
87. D.W. Straub Effective IS security Information Systems Research 1 1990 255 276
88. N. Stuckless, and R. Goranson The vengeance scale: development of a measure of attitudes toward revenge Journal of Social Behavior & Personality 7 1992 25 42
89. S. Thau, R.J. Bennett, M.S. Mitchell, and M.B. Marrs How management style moderates the relationship between abusive supervision and workplace deviance: an uncertainty management theory perspective Organizational Behavior and Human Decision Processes 108 2009 79 92
90. M. Theoharidou, S. Kokolakis, M. Karyda, and E. Kiountouzis The insider threat to information systems and the effectiveness of iso17799 Computers & Security 24 2005 472 484 (Pubitemid 41277034)
91. K.L. Thomson, R. von Solms, and L. Louw Cultivating an organizational information security culture Computer Fraud & Security 2006 2006 7 11 (Pubitemid 44724950)
92. C.R. Tittle, D.A. Ward, and H.G. Grasmick Gender, age, and crime/deviance: a challenge to self-control theory Journal of Research in Crime and Delinquency 40 2003 426
93. E.C. Tomlinson, and R.C. Mayer The role of causal attribution dimensions in trust repair Academy of Management Review 34 2009 85 104
94. M.L. Tushman, and D.A. Nadler Information processing as an integrating concept in organizational design Academy of Management Review 3 1978 613 624
95. T.R. Tyler, and P. Degoey Trust in organizational authorities R.M. Kramer, T.R. Tyler, Trust in organizations: frontiers of theory and research 1996 Sage Publications Thousand Oaks, CA 331 356
96. J.F. Van Niekerk, and R. von Solms Information security culture: a management perspective Computers & Security 29 2010 476 486
97. M.E. Warkentin, and R. Willison Behavioral and policy issues in information systems security: the insider threat European Journal of Information Systems 18 2009 101 105
98. D. Watson, and J.W. Pennebaker Health complaints, stress, and distress: exploring the central role of negative affectivity Psychological Review 96 1989 234 254
99. D. Watson, L.A. Clark, and G. Carey Positive and negative affectivity and their relation to anxiety and depressive disorders Journal of Abnormal Psychology 97 1988 346 353
100. D. Watson, L.A. Clark, and A. Tellegen Development and validation of brief measures of positive and negative affect: the PANAS scales Journal of Personality and Social Psychology 54 1988 1063 1070
101. B. Weiner Achievement motivation and attribution theory 1974 General Learning Press
102. B. Weiner An attributional theory of achievement motivation and emotion Psychological Review 92 1985 548 573
103. B. Weiner The social psychology of emotion: applications of a naive psychology Journal of Social and Clinical Psychology 5 1987 405 419
104. M.E. Whitman Enemy at the gate: threats to information security Communications of the ACM 46 2003 91 95
105. M. Williams In whom we trust: group membership as an affective context for trust development Academy of Management Review 26 2001 377 396
106. R. Willison, and M. Siponen Overcoming the insider: reducing employee computer crime through situational crime prevention Communications of the ACM 52 2009 133 137
107. I. Winkler Attribution theory in leadership research I. Winkler, Contemporary leadership theories 2009 Physica-Verlag Berlin 9 22
108. P.T.P. Wong, and B. Weiner When people ask "why" questions, and the heuristics of attributional search Journal of Personality and Social Psychology 40 1981 650 663