The Assumptions and Profiles Behind IT Security Behavior

Balozian, Puzant; Leidner, Dorothy E.

doi:10.24251/hicss.2017.605

Cited by 3 publications

(3 citation statements)

References 20 publications

(26 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Continuing in Figure 3, participant observation and passive observation were only used in four studies each; given this low frequency it is not possible to identify any patterns in terms of how they have been used. Finally, we found a small number of studies that used ethnography (Niemimaa, 2016; Niemimaa and Niemimaa, 2017), action research (Lopes and Oliveira, 2015b; Lopes and Oliveira, 2015c; Lopes and Oliveira, 2016), grounded theory (Knapp et al , 2009; Balozian and Leidner, 2016), experiment (SanNicolas-Rocca et al , 2014), simulation (Doherty and Fulford, 2006), consultancy (Talbot and Woodward, 2009) and design science (Kolkowska et al , 2017). For example, in the last study, design science was used to develop a method for analysing reasons behind employees’ compliance and non-compliance.…”

Section: Resultsmentioning

confidence: 99%

The hunt for computerized support in information security policy management

Rostami

Karlsson

Kolkowska

2020

ICS

View full text Add to dashboard Cite

Purpose The purpose of this paper is to survey existing information security policy (ISP) management research to scrutinise the extent to which manual and computerised support has been suggested, and the way in which the suggested support has been brought about. Design/methodology/approach The results are based on a literature review of ISP management research published between 1990 and 2017. Findings Existing research has focused mostly on manual support for managing ISPs. Very few papers have considered computerised support. The entire complexity of the ISP management process has received little attention. Existing research has not focused much on the interaction between the different ISP management phases. Few research methods have been used extensively and intervention-oriented research is rare. Research limitations/implications Future research should to a larger extent address the interaction between the ISP management phases, apply more intervention research to develop computerised support for ISP management, investigate to what extent computerised support can enhance integration of ISP management phases and reduce the complexity of such a management process. Practical implications The limited focus on computerised support for ISP management affects the kind of advice and artefacts the research community can offer to practitioners. Originality/value Today, there are no literature reviews on to what extent computerised support the ISP management process. Findings on how the complexity of ISP management has been addressed and the research methods used extend beyond the existing knowledge base, allowing for a critical discussion of existing research and future research needs.

show abstract

Section: Resultsmentioning

confidence: 99%

The hunt for computerized support in information security policy management

Rostami

Karlsson

Kolkowska

2020

ICS

View full text Add to dashboard Cite

show abstract

“…In order to update the literature review of Balozian and Leidner (2017), we searched the literature from 2015 to 2019 inclusive. We surveyed all the articles on IS policy compliance in the Senior Scholars' basket eight of IS journals.…”

Section: Literature Review and Hypothesis Developmentmentioning

confidence: 99%

“…We supplemented our search by scanning the references of recent literature review papers on ISS compliance (Cram et al , 2019; Moody et al , 2018). We found 28 relevant ISS papers published between 2015 and 2019 inclusive (Appendix B), which we analyzed according to the six comprehensive constructs of ISS found in the building blocks of ISS theory of Balozian and Leidner (2017).…”

Section: Literature Review and Hypothesis Developmentmentioning

confidence: 99%

Toward an intellectual capital cyber security theory: insights from Lebanon

Balozian

Leidner

Xue

2021

JIC

Self Cite

View full text Add to dashboard Cite

Purpose Intellectual capital (IC) cyber security is a priority in all organizations. Because of the dearth in IC cyber security (ICCS) research theories and the constant call to theory building, this study proposes a theory of ICCS drawing upon tested empirical data of information systems security (ISS) theory in Lebanon. Design/methodology/approach After a pilot test, the authors tested the newly developed ISS theory using a field study consisting of 187 respondents, representing many industries, thus contributing to generalizability. ISS theory is used as a proxy for the development of ICCS theory. Findings Based on a review of the literature from the past three decades in the information systems (IS) discipline and a discovery of the partial yet significant relevance of ISS literature to ICCS, this study succinctly summarized the antecedents and independent variables impacting security compliance behavior, putting the variables into one comprehensive yet parsimonious theoretical model. This study shows the theoretical and practical relevancy of ISS theory to ICCS theory building. Practical implications This paper highlights the importance of ISS compliance in the context of ICCS, especially in the area of spoken knowledge in environments containing Internet-based security devices. Originality/value This research article is original, as it presents the theory of ICCS, which was developed by drawing upon a comprehensive literature review of the IS discipline and finding the bridges between the security of both IS and IC.

show abstract