Information systems user security: A structured model of the knowing-doing gap

Computers in Human Behavior

Volumn 28, Issue 5, 2012, Pages 1849-1858

  Cox, James ^a  

^a CAPELLA UNIVERSITY   (United States)

Author keywords

Attitude; Information security; Intention; Narcissism; Omissive behavior; Threat

Indexed keywords

ATTITUDE; INTENTION; NARCISSISM; OMISSIVE BEHAVIOR; THREAT;

INFORMATION SYSTEMS; SECURITY OF DATA; SECURITY SYSTEMS;

BEHAVIORAL RESEARCH;

EID: 84863720925     PISSN: 07475632     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.chb.2012.05.003     Document Type: Article

References (47)

1. M.C. Aalsma, D.K. Lapsley, and D.J. Flannery Personal fables, narcissism, and adolescent adjustment Psychology in the Schools 43 2006 481 491 10.1002/pits.20162 (Pubitemid 43600878)
2. I. Ajzen The theory of planned behavior Organizational behavior and human decision processes 50 1991 179 211
3. I. Ajzen Perceived behavioral control, self-efficacy, locus of control, and the theory of planned behavior Journal of Applied Social Psychology 32 2002 665 683
4. D.R. Ames, P. Rose, and C.P. Anderson The NPI-16 as a short measure of narcissism Journal of Research in Personality 40 2006 440 450 10.1016/j.jrp.2005.03.002 (Pubitemid 43779138)
5. C.J. Armitage, and M. Conner Efficacy of the theory of planned behaviour: A meta-analytic review The British Journal of Social Psychology 40 2001 471 499 (Pubitemid 33597358)
6. K. Aytes, and T. Connolly Computer security and risky computing practices: A rational choice perspective Journal of Organizational and End User Computing 16 2004 22 40
7. A. Bandura Self-efficacy: Toward a unifying theory of behavioral change Psychological Review 84 1977 191 215
8. D. Banerjee, T.P. Cronan, and T.W. Jones Modeling it ethics: A study in situational ethics MIS Quarterly 22 1998 31 60
9. K. Bollen, and R. Lennox Conventional wisdom on measurement: A structural equation perspective Psychological Bulletin 110 1991 305 314
10. A.D. Brown Narcissism, identity, and legitimacy Academy of Management Review 22 1997 643 686
11. H.F. Buchan Ethical decision making in the public accounting profession: An extension of Ajzen's theory of planned behavior Journal of Business Ethics 61 2005 165 181 10.1007/s10551-005-0277-2 (Pubitemid 41433516)
12. V.J. Calluzzo, and C.J. Cante Ethics in information technology and software use Journal of Business Ethics 51 2004 301 312
13. W.K. Campbell, A.S. Goodie, and J.D. Foster Narcissism, confidence, and risk attitude Journal of Behavioral Decision Making 17 2004 297 311 10.1002/bdm.475 (Pubitemid 39604572)
14. A. Chatterjee, and D.C. Hambrick It's all about me: Narcissistic chief executive officers and their effects on company strategy and performance Administrative Science Quarterly 52 2007 351 386
15. W.W. Chin Issues and opinion on structural equation modeling MIS Quarterly 1 1998 vii xvi
16. T.P. Cronan, L.N.K. Leonard, and J. Kreie An empirical validation of perceived importance and behavior intention in it ethics Journal of Business Ethics 56 2005 231 238 (Pubitemid 40465274)
17. Crossler, R. E.; & Belanger, F.; 2006. The effect of computer self-efficacy on security training effectiveness. In InfoSecCD '06: Proceedings of the 3rd annual conference on Information security curriculum development (pp. 124-129). New York, NY, USA: ACM.
18. T. Dinev, and Q. Hu The centrality of awareness in the formation of user behavioral intention toward protective information technologies Journal of the Association for Information Systems 8 2007 386 408
19. D. Duchon, and M. Burns Organizational narcissism Organizational Dynamics 37 2008 354 364 10.1016/j.orgdyn.2008.07.004
20. R.A. Emmons Narcissism: Theory and measurement Journal of Personality and Social Psychology 52 1987 11 17
21. M. Fishbein, and I. Ajzen Belief, attitude, intention and behavior: An introduction to theory and research 1975 Addison-Wesley Reading, MA
22. J.D. Foster, J.W. Shenesey, and J.S. Goff Why do narcissists take more risks? Testing the roles of perceived risks and benefits of risky behaviors Personality and Individual Differences 47 2009 885 889 10.1016/j.paid.2009.07. 008
23. D. Gefen, D. Straub, and M. Boudreau Structural equation modeling and regression: Guidelines for research practice Communications of the Association for Information Systems 4 2000 2 76
24. A.M. Gibson, and A.H. Frakes Truth or consequences: A study of critical issues and decision making in accounting Journal of Business Ethics 16 1997 161 171 (Pubitemid 127173108)
25. C.E. Lakey, P. Rose, W.K. Campbell, and A.S. Goodie Probing the link between narcissism and gambling: the mediating role of judgment and decision-making biases Journal of Behavioral Decision Making 21 2008 113 137 10.1002/bdm.582
26. O.D. Lee, K.H. Lim, and W.M. Wong Why employees do non-work-related computing: an exploratory investigation through multiple theoretical perspectives Proceedings of the 38th Hawaii international conference on system Sciences Vol. 7 2005 Computer Society Press 1 9
27. S. Lee, S.N. Yoon, and J. Kim The role of pluralistic ignorance in Internet abuse The Journal of Computer Information Systems 48 2008 38 44
28. L. Leonard, and T. Cronan Attitude toward ethical behavior in computer use: A shifting model Industrial Management & Data Systems 105 2005 1150 1171 10.1108/02635570510633239 (Pubitemid 41751761)
29. R. Lubit The long-term organizational impact of destructively narcissistic managers Academy of Management Executive 16 2002 127 138
30. C.C. Morf, and F. Rhodewalt Unraveling the paradoxes of narcissism: A dynamic self-regulatory processing model Psychological Inquiry 12 2001 177 196
31. D.M. Randall, and A.M. Gibson Ethical decision making in the medical profession: An application of the theory of planned behavior Journal of Business Ethics 10 1991 111 122
32. R. Raskin, and H. Terry A principal-components analysis of the narcissistic personality inventory and further evidence of its construct validity Journal of Personality and Social Psychology 54 1988 890 902
33. H.J. Reitz, and L.N. Jewell Sex, locus of control, and job involvement: A six-country investigation Academy of Management Journal 22 1979 72 80
34. H. -S. Rhee, C. Kim, and Y.U. Ryu Self-efficacy in information security: Its influence on end users' information security practice behavior Computers & Security 28 2009 816 826 10.1016/j.cose.2009.05.008
35. P.A. Rippetoe, and R.W. Rogers Effects of components of protection-motivation theory on adaptive and maladaptive coping with a health threat Journal of Personality and Social Psychology 52 1987 596 604
36. I. Rosenstock, V. Strecher, and M. Becker Social learning theory and the health belief model Health Education & Behavior 2 1988 175 183
37. J.B. Rotter Internal versus external control of reinforcement: A case history of a variable American Psychologist 45 1990 489 493
38. E. Schultz Security training and awareness - fitting a square peg in a round hole Computers & Security 23 2004 1 2
39. M. Siponen, M.A. Mahmood, and S. Pahnila Are employees putting your company at risk by not following information security policies? Communications of the ACM 52 2009 145 147 10.1145/1610252.1610289
40. S. Steele, and C. Wargo An introduction to insider threat management Information Systems Security 16 2007 23 34
41. D. Straub, M. Boudreau, and D. Gefen Validation guidelines for IS positivist research Communications of the Association for Information Systems 13 2004 380 427
42. S. Vazire, and D.C. Funder Impulsivity and the self-defeating behavior of narcissists Personality & Social Psychology Review (Lawrence Erlbaum Associates) 10 2006 154 165 (Pubitemid 43764488)
43. P. Williams Information security governance Information Security Technical Report 6 2001 60 70 10.1016/S1363-4127(01)00309-0 (Pubitemid 33663935)
44. P. Williams In a 'trusting' environment, everyone is responsible for information security Information Security Technical Report 13 2008 207 215 10.1016/j.istr.2008.10.009
45. M. Workman Gaining access with social engineering: An empirical study of the threat Information Systems Security 16 2007 315 331 10.1080/1065890701788165
46. M. Workman, W.H. Bommer, and D. Straub Security lapses and the omission of information security measures: A threat control model and empirical test Computers in Human Behavior 24 2008 2799 2816 10.1016/j.chb.2008.04.005
47. M. Zviran, and W.J. Haga Password security: An empirical study Journal of Management Information Systems 15 1999 161 186