Navigation überspringen
Universitätsbibliothek Heidelberg
Verfasst von:D'Arcy, John
 Lowry, Paul Benjamin
Titel:Cognitive‐affective drivers of employees' daily compliance with information security policies: A multilevel, longitudinal study
Verlagsort:Oxford
Verlag:Blackwell Publishing Ltd
Jahr:2019
Umfang:27 S.
Inhalt:We present a model of employee compliance with information security policy (ISP) that (1) explicates stable, cognitive beliefs regarding the consequences of compliance and noncompliance as well as state‐based affective constructs, namely, positive and negative mood states and episodic, security‐related work‐impediment events, and (2) provides an expanded conceptualisation of moral considerations and normative influences regarding employees' ISP compliance. Because affect is central to this theorisation, we ensure that the model captures and explains differences in day‐to‐day affective constructs to account for the often fleeting nature of affective states. We test our multilevel model using an experience‐sampling methodology design, in which employees completed daily surveys over a 2‐week period, followed by a hierarchal linear modelling statistical assessment. Our contribution to theory is a unique account of ISP compliance that integrates affective factors with constructs from rational choice theory and theory of planned behaviour and that diverges from prior conceptualisations of ISP compliance as a purely stable and reason‐based phenomenon. For practitioners, our results suggest that a combination of cognitive and affective influences may produce discrete episodes of ISP compliance that do not coincide with prior behavioural trends.
ISSN:1350-1917
Titel Quelle:Information systems journal (Oxford, England)
Jahr Quelle:2019
Band/Heft Quelle:29, 1, S. 43-69
DOI:doi:10.1111/isj.12173
URL:http://www.ub.uni-heidelberg.de/cgi-bin/edok?dok=https%3A%2F%2Ffanyv88.com%3A443%2Fhttps%2Fonlinelibrary.wiley.com%2Fdoi%2Fabs%2F10.1111%2Fisj.12173
 http://www.ub.uni-heidelberg.de/cgi-bin/edok?dok=https%3A%2F%2Ffanyv88.com%3A443%2Fhttps%2Fwww.proquest.com%2Fdocview%2F2153847535%2Fabstract%2F
 DOI: https://doi.org/10.1111/isj.12173
Sprache:English
Sach-SW:affect
 Affect (Psychology)
 Compliance
 Correlation analysis
 Cybersecurity
 Employees
 information security policies (ISPs)
 ISP compliance
 Longitudinal studies
 Model testing
 multilevel analysis
 rational choice theory (RCT)
 theory of planned behaviour (TPB)
Verknüpfungen:→ Sammelwerk


zum Seitenanfang