Appreciating Organizational Behavior and Institutions to Solidify Your Information Security Program

Researchers generally believe that organizational control can deter employees' information security deviant behaviors. However, these relationships are not always observed. Based on the cognitive appraisal theory, this study extends the content domain of information security research by examining the moderating effect of power distance orientation, a kind of cultural value, on these relationships. In the results, first, the severity of penalty and the certainty of detection decreases employees' computer abuse. Second, employee power distance orientation moderates the relationships of the severity of penalty with employee computer abuse, such that the negative relationships are stronger for employees with higher power distance orientation. The findings suggest the deterrent function of cultural values employees hold in organizational behavior.

Download Full-text

Checking the manipulation checks in information security research

Information and Computer Security ◽

10.1108/ics-12-2013-0087 ◽

2015 ◽

Vol 23 (1) ◽

pp. 20-30 ◽

Cited By ~ 4

Author(s):

Kent Marett

Keyword(s):

Information Security ◽

Organizational Behavior ◽

Design Methodology ◽

Manipulation Check ◽

Content Type ◽

Traditional Assessment ◽

Security Research ◽

Research Designs ◽

Human Side ◽

Type Ii Errors

Purpose – An increasing amount of attention is being paid to the human side of information security programs, leading to research designs that require the manipulation of study variables. The purpose of this paper is to highlight a traditional assessment of such designs, the manipulation check, and examine how its absence can undermine otherwise solid research efforts. Design/methodology/approach – This paper reviews literature from the fields of research methods, organizational behavior and information systems for extant perspectives and viewpoints on manipulation checks, which are then brought into the realm of information security research. Findings – The possible risks involved with failing to perform manipulation checks are discussed, which include a possibility of making Type II errors. The paper provides further insight on the timing, method and manner in which manipulation checks can be performed. Originality/value – A disappointing number of research articles in the area of information security fail to report manipulation checks when they should. This paper seeks to remind researchers to perform this vital assessment and to use the results accordingly.

Download Full-text