The impact of security awareness on information technology professionals' behavior

Torten, Ron, Reaiche, Carmen, and Boyle, Stephen (2018) The impact of security awareness on information technology professionals' behavior. Computers & Security, 79. pp. 68-79.

[img] PDF (Published Version) - Published Version
Restricted to Repository staff only

View at Publisher Website: https://doi.org/10.1016/j.cose.2018.08.0...


Abstract

Protecting digital assets is a growing concern for corporations, as cyberattacks affect business performance, reputation, and compromise intellectual property. Information technology (IT) security in general and cyber security, in particular, is a fast-evolving area that requires continuous evaluation and innovation. The objective of cyber-attacks has not changed over time however there is a shift in the attack methods through the increased use of social engineering, concentrating on the human elements as the weakest link in the security posture of any system network. This research looks at the relationship between threat awareness and countermeasure awareness on IT professionals' compliance with desktop security behaviors. The model originally put forward by Hanus and Wu (2016), was tested on a population of 400 IT professionals across a broad range of IT roles and company sizes in the United States. The overall findings show that 61.2% of the variability in desktop security behavior can be explained by threat awareness and countermeasure awareness. In addition, the research found a determinant relationship between threat awareness and countermeasure awareness with the five elements of protective motivation theory (PMT), which include perceived severity, perceived vulnerability, self-efficacy, response efficacy, and response cost. Finally, the research shows that all elements of PMT, with the exception of perceived vulnerability, significantly determine desktop security behavior.

Item ID: 62867
Item Type: Article (Research - C1)
ISSN: 1872-6208
Copyright Information: © 2018 Elsevier Ltd. All rights reserved.
Date Deposited: 16 Apr 2020 04:29
FoR Codes: 08 INFORMATION AND COMPUTING SCIENCES > 0803 Computer Software > 080303 Computer System Security @ 80%
08 INFORMATION AND COMPUTING SCIENCES > 0899 Other Information and Computing Sciences > 089999 Information and Computing Sciences not elsewhere classified @ 20%
More Statistics

Actions (Repository Staff Only)

Item Control Page Item Control Page