The Compromise of One’s Personal Information: Trait Affect as an Antecedent in Explaining the Behavior of Individuals

Abstract

This research examined the role trait affect, a lifelong and generally stable type of affect, has on the information security behavior of individuals. We examined this in the context of how one responds to the threat of one's personal information becoming compromised. This was done by extending Protection Motivation Theory (PMT) by incorporating the two higher order dimensions of affect, positive affect and negative affect, as antecedents to self-efficacy, perceived threat severity, and perceived threat vulnerability. A survey was used to explore this further. Seven of the 11 hypotheses were supported, including three of the six related to affect. This research makes two primary contributions. First, trait affect may play an indirect role in understanding how individuals evaluate, respond to, and cope with a threat. Second, this research extended the application of PMT, which has been the primary theory used to understand the information security behavior of individuals.

Clickthrough Testing for Real-World Phishing Simulations

“…Overall, 11.0% of the participants were successfully phished, which includes 5.7% of participants that identify as female and 19.3% of participants that identify as male. We conducted a chi-square test to determine if there was a significant difference based on gender and found that gender was related to the propensity to click on this phishing email, 2 (2, N = 146) = 6.73, p < .05.…”

“…The continued success of social engineering attacks is perhaps most evident in the use of and response to phishing emails. Despite the relatively long history of studying phishing and attempts to mitigate its effectiveness (e.g., [5]), it remains a significant challenge and threat for end users, including to their personal information [2]. There are many challenges associated with phishing email simulations.…”