Explaining Users' Security Behaviors with the Security Belief Model

Abstract

Information security is often viewed as a technological matter. However, security professionals will readily admit that without safe practices by users, no amount or type of technology will be effective at preventing unauthorized intrusions. By paralleling the practices of information security and health prevention, a rationale for employing constructs from existing models of health behavior is established. A comprehensive and parsimonious model (the Security Belief Model) is developed to explain information security behavior intentions. The model is tested empirically based on a sample of 237 Indian professionals. The results of the empirical study indicate general support for the model, particularly including severity, susceptibility, benefits, and a cue to action as antecedents to the intention to perform preventive information security behaviors. The paper also discusses implications of the model and results for practitioners and possibilities for future research are included.

Bring Your Own Device (BYOD) as reversed IT adoption: Insights into managers’ coping strategies

“…Finally, new software solutions, such as cloud access security brokers (CASBs), can provide security for remote workers who are increasingly accessing applications and data in the cloud ( Gartner, 2019 ), especially when working with their personal devices from home ( Bitglass, 2020 ; Papagiannidis et al, 2020 ). However, better protective technologies are not sufficient ( Williams, Wynn, Madupalli, Karahanna, & Dunkan, 2014 ) to efficiently mitigate BYOD-related security issues; protective behaviors and attitudes are also important ( Aurigemma & Mattson, 2019 ; Balapour et al, 2020 ). Some security measures can directly affect the company’s management and thus require organizational reflection ( Brodin, 2016 ) and management’s decision making ( Jeong, Lee, & Lim, 2019 ).…”

The Effects of Applying Privacy by Design to Preserve Privacy and Personal Data Protection in Mobile Cloud Computing: An Exploratory Study

“…Generally, the HBM was utilized in information systems' security domain [15,19,20,[49][50][51]. In addition, the current study adopts the HBM for the following reasons:…”

“…Furthermore, a total of 386 responses were used for the current analysis. Moreover, the SmartPLS 3.2.8 [15][16][17][18][19][20][21] has been utilized for the data analysis. The SmartPLS 3.2.8 is a well-known tool for statistical analysis and extensively employed in the research domain [19,20].…”

“…Moreover, the SmartPLS 3.2.8 [15][16][17][18][19][20][21] has been utilized for the data analysis. The SmartPLS 3.2.8 is a well-known tool for statistical analysis and extensively employed in the research domain [19,20]. This study's results supported that the perceived benefits, cues to action of PbD, and the perceived threat are positively and directly related to privacy and personal data protection behavior in MCC.…”

“…The HBM tackles personal human issues towards assessing and modeling the impacts of the diseases [15,19,20,[49][50][51]. Information systems security experts have adopted the HBM for modeling and assessing personal issues, such as personal data protection and privacy.…”