Enforcing Information Security Protection: Risk Propensity and Self-Efficacy Perspectives

Nguyen, Quynh N.; Kim, Dan J.

doi:10.24251/hicss.2017.601

Cited by 5 publications

(2 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Researchers have recognized risk propensity as an important antecedent to security threat perceptions and avoidance behaviors (Moody, Galletta, Walker, & Dunn, 2011;Nguyen & Kim, 2017;Sun & Ahluwalia, 2008;Vance et al, 2014). Nguyen and Kim (2017) studied the level of association between 244 university students' risk propensities and their information-avoidance behaviors. They found significant associations between individuals' risk propensities and their threat perceptions and behaviors.…”

Section: Risk Propensitymentioning

confidence: 99%

Refining Technology Threat Avoidance Theory

Carpenter¹,

Young²,

Barrett³

et al. 2019

CAIS

View full text Add to dashboard Cite

Understanding individual threat avoidance motivation and behavior is a critical component in designing effective cyber security solutions for both users and organizations. Technology threat avoidance theory (TTAT) asserts that individuals' perceptions regarding their susceptibility to and the resulting severity of technology threats influence their awareness of the threats, which, in turn, influences their motivation and behavior to avoid them. While TTAT provides cogently and logically explains individuals' technology threat motivations and behaviors, empirical tests have produced equivocal results particularly in terms of the influence of susceptibility and severity on threat perceptions. Due to these inconsistencies in the threat calculus involving susceptibility, severity, and threat, we need more work to improve and understand individual threat motivations. Additionally, TTAT does not account for individual differences such as risk propensity, distrust propensity, and impulsivity that have been shown to affect cyber security behavior. To address these gaps, we present an empirical assessment of a refined TTAT model, which includes individual differences and models the influence of susceptibility on threat perceptions as partially mediated by severity. Results indicate that, while perceived susceptibility is a significant predictor of threat perceptions, severity perceptions partially mediates its effect. Our results also support the inclusion of risk propensity and distrust propensity in the TTAT model as personal characteristics that significantly affect overall threat perceptions.

show abstract

Section: Risk Propensitymentioning

confidence: 99%

Refining Technology Threat Avoidance Theory

Carpenter¹,

Young²,

Barrett³

et al. 2019

CAIS

View full text Add to dashboard Cite

show abstract

“…Decisions related to IT threats inherently involve a combination of risks characterized by high ambiguity [12]. Therefore, it can be expected that there will be a relationship between an individual's risk propensity and threat perception or behavior [13]. In fact, many studies have shown that risk propensity has a significant impact on security threat perception and avoidance behavior [14,15].…”

Section: B Research Purposementioning

confidence: 99%

Enhancing Participatory Security Culture in Public Institutions: An Analysis of Organizational Employees’ Security Threat Recognition Processes

Choi,

Park,

Kang

2024

IEEE Access

View full text Add to dashboard Cite

This study recognizes the importance of employees' behavior in influencing the effectiveness of security alternatives despite the technical factors being well-established. As such, the study proposes a novel approach to reinforce security among employees, beginning with a practical case pertaining to their security compliance behavior. Utilizing the technology threat avoidance theory (TTAT) and the trust-risk model, the study explains the process by which employees voluntarily comply with information security policies upon perceiving a malware threat. It seeks to achieve this goal by employing a vignette experiment investigating how employees manage IT threats and conducting an empirical analysis of the factors impacting their compliance behavior with security policies in the context of malware threats. The findings indicate that raising employees' awareness of effective protective measures is critical in preventing or controlling malware while recognizing an appropriate threat level can enhance the persuasiveness of risk. By validating the proposed framework, this study could enable organizations to identify effective information security measures, thereby enhancing security culture reinforcement strategies to support sustainable growth. Future studies in different organizations could potentially increase the validity and generalizability of the findings.

show abstract