[ROS1 fusion proteins, targets of foretinib].

J. Bénard

IF: 1.318

Bulletin du Cancer

Abstract:

What problem does this paper attempt to address?

Information Security Policy Noncompliance: an Integrative Social Influence Model.

Kholekile L. Gwebu,Jing Wang,Michael Y. Hu

DOI: https://doi.org/10.1111/isj.12257

2020-01-01

Abstract:Despite the significant advancements made in understanding the factors that drive employees' compliance and noncompliance behaviours with information security policy (ISP), less is known about how different factors interact to impact such behaviours. Having been drawn on the social information processing theory, this research develops an integrative model that investigates how ethical work climate, beliefs, and neutralization interact to jointly explain ISP noncompliance. The model is tested via a survey of a broad cross section of employees. Neutralization, perceived cost of compliance, and perceived cost of noncompliance are found to significantly impact ISP noncompliance. Egoistic, benevolent, and principled climates are found to differentially influence neutralization and individuals' cognitive beliefs about the cost and benefit of ISP compliance versus noncompliance. Neutralization appears to be a more important moderator of the belief‐noncompliance relationship than the principled climate.
The Impacts of Supervisory Information Communication Technology (ICT) Demands after Hours on Employee Proactive Behavior and Unethical Behavior at Work: an Attribution Perspective

Shenjiang Mo,Wenqing Yu,Yanran Fang,Yi Su,Yu Zhao

DOI: https://doi.org/10.1016/j.jvb.2024.104065

IF: 12.082

2024-01-01

Journal of Vocational Behavior

Abstract:It is not unusual that employees are required by their supervisors to stay accessible and responsive to work during nonwork time in the digitalized workplace. Yet, we know little about how and when supervisory information communication technology (ICT) demands after hours influence employee behavior at work. Drawing on attribution theory, our research aims to unpack the underlying mechanisms that transmit the effects of supervisory ICT demands after hours on employee proactive behavior and unethical behavior at work. We collected data from 397 employees in a media company (Study 1) and 493 employees in a retail corporation (Study 2) in East China, both using a three-wave time-lagged design. Results showed that supervisory ICT demands after hours positively related to employee proactive behavior through employees' performance-promotion attribution. Employees' self-serving attribution mediated the positive association between such demands and employee unethical behavior. Moreover, ICT centrality strengthened the indirect relationship between supervisory ICT demands after hours and employee proactive behavior. Specifically, this indirect relationship was stronger (vs. weaker) when employees perceived higher (vs. lower) ICT centrality. Theoretical and practical implications are discussed.
From hindrance to challenge

Ying Li,Ting Pan,Nan Zhang,Nan (Andy) Zhang

DOI: https://doi.org/10.1108/jeim-01-2019-0018

2019-09-23

Journal of Enterprise Information Management

Abstract:Purpose This paper is to investigate how employees respond to information security policies (ISPs) when they view the policies as a challenge rather than a hindrance to work. Specifically, the authors examine the roles of challenge security demands (i.e. continuity and mandatory) and psychological resources (i.e. personal and job resources) in influencing employees’ ISP non-compliance. Design/methodology/approach Applying a hypothetical scenario-based survey method, the authors tested our proposed model in six typical ISPs violation scenarios. In sum, 347 responses were collected from a global company. The data were analyzed using partial least square-based structural equation model. Findings Findings indicated that continuity and mandatory demands increased employees’ level of perseverance of effort, which, in turn, decreased their ISPs non-compliance intention. In addition, job resources, such as the trust enhancement gained from co-workers and the opportunities for professional development, enhanced the perseverance of effort. Practical implications The findings offer implications to practice by suggesting that organizations should design training programs to persuade employees to understand the ISPs in a positive way. Meanwhile, organizations should encourage employees to invest more personal resources by creating a trusting atmosphere and providing them opportunities to learn security knowledge and skills. Originality/value This study is among the few to empirically explore how employees respond and behave when they view the security policies as challenge stressors. The paper also provides a novel understanding of how psychological resources contribute to buffering ISP non-compliance.

information science & library science,management
How Supervisory ICT Demands after Hours Influence Employee Work Behavior Via Employee Attributions

Wenqing Yu,Yanran Fang,Shenjiang Mo,Yi Su

DOI: https://doi.org/10.5465/amproc.2023.14517abstract

2023-01-01

Academy of Management Proceedings

Abstract:With the widespread use of information communication technologies (ICTs), being required by supervisors to keep accessible and responsive to work out of regular work time, termed as supervisory ICT demands after hours, has been prevailing and controversial. Yet, we have limited knowledge about the effects of such demands on employee work behavior. To fill this void, we draw on attribution theory to examine the constructive attribution (i.e., employee attribution of supervisory performance-promotion) and the destructive attribution (i.e., employee attribution of supervisory self-serving) as key mechanisms that transmit the positive indirect effects of supervisory ICT demands after hours on employee proactive and unethical behavior, separately. We further examine the moderating role of ICT centrality perceived by each employee in shaping the indirect impacts. Three-wave data was collected from 493 employees working at a retail corporation. Results showed that supervisory ICT demands after hours indirectly triggered employee proactive behavior via employee attribution of supervisory performance-promotion, whereas such demands indirectly triggered employee unethical behavior via employee attribution of supervisory self-serving. Furthermore, when employees perceive higher ICT centrality (vs. lower), the indirect positive relationship between supervisory ICT demands after hours and employee proactive behavior was more salient. Theoretical and practical implications are discussed.
Violation with Concerns of Safety: A Study on Non-Compliant Behavior and the Antecedent and Consequent Effects in Power Grid Construction

Fan Zhou,Hongxu Lu,Chunping Jiang

DOI: https://doi.org/10.1016/j.ssci.2023.106353

IF: 6.392

2024-01-01

Safety Science

Abstract:Non-compliant behaviors have been indicated to be leading indicators of accidents in workplaces. Though most studies treat intentional non-compliant behavior or violations as monolithic indicators for adverse safety performance, non-compliant behaviors might take different forms with distinct motives and outcomes. To examine and compare the effects of different forms of non-compliant safety behavior, we proposed a construct of risk-adjusted non-compliant behavior, which refers to employees' deliberate deviation from safety rules while considering safety concerns and adjusting their behavior accordingly, and investigated the differential antecedent effects by contextual factors and consequential effects on safety outcomes. By a sample of 390 workers and their supervisors in a power grid construction firm, the results of our study indicated that safety climate and transformational leadership were positively associated with safety compliance and negatively associated with violation by multi-level analyses. However, active transactional leadership also had a positive association with risk-adjusted non-compliant behavior, and this association was moderated by safety climate such that the relationship was stronger in higher level of safety climate. Furthermore, although risk-adjusted non-compliant behavior did not significantly affect penalties for deviance compared to violation behavior, it increased the workers' risk perception of hazard. The implications of these findings for theory were discussed.
The impact of an employee's psychological contract breach on compliance with information security policies: intrinsic and extrinsic motivation

Daeun Lee,Harjinder Singh Lallie,Nadine Michaelides

2023-07-06

Abstract:Despite the rapid rise in social engineering attacks, not all employees are as compliant with information security policies (ISPs) to the extent that organisations expect them to be. ISP non-compliance is caused by a variety of psychological motivation. This study investigates the effect of psychological contract breach (PCB) of employees on ISP compliance intention (ICI) by dividing them into intrinsic and extrinsic motivation using the theory of planned behaviour (TPB) and the general deterrence theory (GDT). Data analysis from UK employees (\textit{n=206}) showed that the higher the PCB, the lower the ICI. The study also found that PCBs significantly reduced intrinsic motivation (attitude and perceived fairness) for ICI, whereas PCBs did not moderate the relationship between extrinsic motivation (sanction severity and sanctions certainty) and ICI. As a result, this study successfully addresses the risks of PCBs in the field of IS security and proposes effective solutions for employees with high PCBs.

Computers and Society
Does stress reduce violation intention? Insights from eustress and distress processes on employee reaction to information security policies

Adel Yazdanmehr,Yuan Li,Jingguo Wang

DOI: https://doi.org/10.1080/0960085X.2022.2099767

2022-07-24

European Journal of Information Systems

Abstract:Past research suggests that the demands of information security policies (ISPs) cause stress upon employees, leading them to violate the policies. It emphasises the distress process but overlooks a possible positive process that may arise from the ISP demands (i.e., the eustress process) and motivate employees to reduce ISP violations. This study explores both the distress and eustress processes. It proposes that the challenge and hindrance aspects of ISP demands induce these processes and subsequently affect ISP violations. Besides, employees' ISP-related self-efficacy may facilitate or impede these processes. To test the research model, a survey was conducted on 375 employees in the U.S. The results show that the challenge aspect of ISP demands elicits a positive psychological response of employees, which in turn triggers their planful problem-solving to deal with these demands. In contrast, the hindrance aspect of ISP demands provokes a negative psychological response that triggers employees' wishful thinking about ISP demands. Meanwhile, employees' self-efficacy strengthens the effect of positive psychological response on planful problem-solving. Subsequently, planful problem-solving reduces employees' intention to violate the ISP, while wishful thinking increases their intention. This dual-process view sheds new light on the connection between ISP demands and ISP violation intention.

information science & library science,management,computer science, information systems
An Investigation of Employees' Intention to Comply with Information Security System—A Mixed Approach Based on Regression Analysis and fsQCA

Wenqin Li,Rongmin Liu,Linhui Sun,Zigu Guo,Jie Gao

DOI: https://doi.org/10.3390/ijerph192316038

IF: 4.614

2022-12-01

International Journal of Environmental Research and Public Health

Abstract:Employee security compliance behavior has become an important safeguard to protect the security of corporate information assets. Focusing on human factors, this paper discusses how to regulate and guide employees' compliance with information security systems through effective methods. Based on protection motivation theory (PMT), a model of employees' intention to comply with the information security system was constructed. A questionnaire survey was adopted to obtain 224 valid data points, and SPSS 26.0 was applied to verify the hypotheses underlying the research model. Then, based on the results of a regression analysis, fuzzy set qualitative comparative analysis (fsQCA) was used to explore the conditional configurations that affect employees' intention to comply with the information security system from a holistic perspective. The empirical results demonstrated that perceived severity, perceived vulnerability, response efficacy, and self-efficacy all positively influenced the employees' intention to comply with the information security system; while rewards and response costs had a negative effect. Threat appraisal had a greater effect on employees' intention to comply with the information security system compared to response appraisal. The fsQCA results showed that individual antecedent conditions are not necessary to influence employees' intention to comply with an information security system. Seven pathways exist that influence an employees' intention to comply with an information security system, with reward, self-efficacy, and response cost being the core conditions having the highest probability of occurring in each configuration of pathways, and with perceived severity and self-efficacy appearing in the core conditions of configurations with an original coverage greater than 40%. Theoretically, this study discusses the influence of the elements of PMT on employees' intention to comply with an information security system, reveals the mechanism of influence of the combination of the influencing factors on the outcome variables, and identifies the core factors and auxiliary factors in the condition configurations, providing a new broader perspective for the study of information security compliance behavior and providing some theoretical support for strengthening enterprise security management. Practically, targeted suggestions are proposed based on the research results, to increase the intention of enterprise employees to comply with information security systems, thereby improving the effectiveness of enterprise information security management and the degree of information security in enterprises.

public, environmental & occupational health,environmental sciences
Impact of negative emotions on violations of information security policy and possible mitigations

Jie Zhen,Zongxiao Xie,Kunxiang Dong,Lin Chen

DOI: https://doi.org/10.1080/0144929X.2021.1921029

2021-05-05

Behaviour and Information Technology

Abstract:Security research on the role of employees' negative emotions in their information security policy (ISP) violations is limited. In this study, we examine how employees' negative emotions influence their intention to violate ISP. To understand how to reduce employees' negative emotions, we investigate the effects of perceived organisational support, psychological ownership, and work engagement. We test our hypotheses using survey data of 318 employees from various organisations in China. Results indicate that employees with negative emotions are more likely to violate ISP, while perceived organisational support, psychological ownership, and work engagement can reduce employees' negative emotions. Furthermore, psychological ownership and work engagement partially mediate the relationship between perceived organisational support and negative emotions. The theoretical and practical significance of these results and the direction of future research are discussed.

ergonomics,computer science, cybernetics
Technostress and its influence on employee information security policy compliance

Forough Nasirpouri Shadbad,David Biros

DOI: https://doi.org/10.1108/itp-09-2020-0610

2020-12-28

Information Technology and People

Abstract:Purpose This study focuses on unintended negative consequences of IT, called technostress. Given that employees are recognized as a major information security threat, it makes sense to investigate how technostress resulting from employees' constant interaction with IT influences the likelihood of security incidents. Although past research studied the concept of security-related technostress, the effect of IT use itself on employees’ extra-role activities such as security-related behaviors is unanswered. Thus, this paper aims to provide an understanding of the negative impact of technostress on employee information security policy (ISP) compliance. Design/methodology/approach Drawing on technostress literature, this research develops a research model that investigates the effect of technostress on employee intention to violate ISPs. It also extends the dimensionality of technostress construct by adding a new dimension called “techno-unreliability” that shows promising results. The authors use online survey data from a sample of 356 employees who have technology-based professions. We apply the structural equation modeling technique to evaluate the proposed research model. Findings Findings showed that IT use imposes high-level perceptions of a set of technostress creators, which makes users rationalize their ISP violations and engage in non-compliant behaviors. Further analysis of each dimension of technostress showed that techno-complexity, techno-invasion and techno-insecurity account for higher ISP non-compliant behaviors. Originality/value This study provides a new understanding of technostress to the context of information security and emphasizes on its negative impact on employee ISP compliance behaviors.

information science & library science
How different rewards tend to influence employee non-compliance with information security policies

Rima Khatib,Henri Barki

DOI: https://doi.org/10.1108/ics-01-2021-0008

2021-08-09

Information and Computer Security

Abstract:Purpose To help reduce the increasing number of information security breaches that are caused by insiders, past research has examined employee non-compliance with information security policy. However, existent studies have observed mixed results, which suggest that an interaction is likely to exist among the variables that explain employee non-compliance. In an effort to provide evidence for this possibility, this paper aims to better explain why employees routinely engage in non-compliant behaviors by examining the direct and interactive effects of employees’ perceived costs and rewards of compliance and non-compliance on their routinized non-compliant behaviors. Design/methodology/approach Based on rational choice theory, this study used 16 hypothetical scenarios in an experimental survey, collecting data from 326 respondents and analyzing them via structural equation modeling and a four-way factorial experiment. Findings The results suggest that routinized non-compliance of employees is more strongly influenced by the rewards than the costs they perceive in their non-compliance. Further, employees’ routinized non-compliance behavior was found to be positively influenced by an interactive effect of perceived rewards of compliance when their perceptions of their non-compliance costs and rewards were both high and low. Originality/value This paper’s key contribution is to suggest that non-compliance behavior is influenced by direct and interactive effects of perceived rewards of compliance and non-compliance.
Promoting Security Behaviors in Remote Work Environments: Personal Values Shaping Information Security Policy Compliance

Carlos I. Torres,Robert E. Crossler

DOI: https://doi.org/10.1287/isre.2021.0563

IF: 4.9

2024-07-01

Information Systems Research

Abstract:Organizations worldwide face critical concerns related to cybersecurity threats and information security policy (ISP) compliance. Even though humans are the weakest link in the cybersecurity chain, information security professionals understand the importance of promoting individual information security behaviors because employees are also the first line of defense against ever-increasing cyber threats. Despite a recent trend of working from home, organizations do not make significant differences in their information security interventions for remote workers, relying mainly on VPNs as the only used tool, essentially making employees follow in-office standard information security policies because they are “virtually in-office.” Our study suggests that organizations need to recognize the unique context of remote work and consider personal motivations when shaping information security practices. Furthermore, our study indicates that in order to motivate remote employees to follow secure information security practices, organizations should consider personal characteristics instead of focusing on generic interventions. For instance, our study compares onsite and remote workers, suggesting that personal values are more relevant in remote work settings. Our findings exemplify just one of the many potential personal characteristics to be considered, highlighting how personal values are important motivators for ISP compliance and how they differ for onsite and remote workers in their importance when following information security rules.

information science & library science,management
An Investigation of the Factors that Influence Job Performance During Extreme Events: The Role of Information Security Policies

Victoria Kisekka,Sanjay Goel

DOI: https://doi.org/10.1007/s10796-022-10281-6

2022-06-02

Information Systems Frontiers

Abstract:Diligent compliance with Information security Policies (ISP) can effectively deter threats but can also adversely impact organizational productivity, impeding organizational task completion during extreme events. This paper examines employees' job performance during extreme events. We use the conservation of resources (COR) theory to examine how psychological resources (individual resilience, job meaningfulness, self-efficacy) and organizational resources (incident command leadership, information availability, and perceived effectiveness of security and privacy controls) influence ISP compliance decisions and job performance during extreme events. The results show that a one-size-fits-all approach to ISP is not ideal during extreme events; ISP can distract employees from critical job tasks. We also observed that under certain conditions, psychological resources, such as individual resilience, are reserved for job performance, while others, such as self-efficacy, are reserved for ISP compliance. A post hoc analysis of data from respondents who experienced strain during a real extreme event while at work was conducted. Our discussion provides recommendations on how security and privacy policies can be designed to reflect disaster conditions by relaxing some policy provisions.

computer science, information systems, theory & methods
Examining the impact of work overload on cybersecurity behavior: highlighting self-efficacy in the realm of artificial intelligence

Byung-Jik Kim,Min-Jik Kim,Julak Lee

DOI: https://doi.org/10.1007/s12144-024-05692-4

IF: 2.8

2024-02-01

Current Psychology

Abstract:This study investigates the relationship between work overload and employee cybersecurity behavior, with a particular focus on the moderating role of self-efficacy in artificial intelligence (AI) use. Grounded in a multidisciplinary theoretical framework, the research integrates concepts from the Job Demands-Resources (JD-R) Model, Cognitive Load Theory, Social Identity Theory, and Protection Motivation Theory. Data were collected from 410 employees in South Korea through a three-wave time-lagged survey, analyzing the impact of work overload on cybersecurity behavior mediated by job stress and organizational identification, and moderated by self-efficacy in AI. The current study reveals a negative impact of work overload on employee cybersecurity behavior, mediated by job stress and organizational identification. Also, self-efficacy in AI use significantly moderates the relationship between work overload and job stress, mitigating the adverse effects of workload on cybersecurity behavior. The findings extend existing literature by demonstrating how organizational psychology theories can be applied to understand cybersecurity behavior in the workplace. This study highlights the importance of managing work overload and enhancing AI self-efficacy to improve cybersecurity practices in organizations. The study underscores the need for organizations to address work overload as a part of their cybersecurity strategy and to invest in AI self-efficacy training. The findings advocate for an interdisciplinary approach to cybersecurity, integrating insights from organizational psychology and AI technology. Future research should explore these dynamics in different cultural and organizational contexts and consider longitudinal designs to further validate the findings.

psychology, multidisciplinary
Employees' Intention to Comply with Information Security Policies: The Impacts of Loafing and Commitment

Chao-Min Chiu,Hsiang-Lan Cheng,Jack Shih-Chieh Hsu,Chiew Mei Tan,Chiung Hui Huang

DOI: https://doi.org/10.1080/10447318.2024.2422757

IF: 4.92

2024-11-20

International Journal of Human-Computer Interaction

Abstract:Drawing upon the attitude theory, this study theorizes that commitment affects loafing behaviors and ISP compliance. Further, drawing upon the transfer theory, this study adopts the concepts of loafing and commitment transfer in order to explore whether social loafing will enhance employee cyberloafing and whether organizational commitment can enhance ISP commitment, both of which, in turn, influence ISP compliance intention. This study utilized structural equation modeling (SEM) to analyze survey data collected in July 2023 from 361 Taiwanese individuals affiliated with organizations or companies. The results show that social loafing has a strong positive effect on cyberloafing, which, in turn, has a strong negative effect on ISP compliance intention. Organizational commitment has a strong positive effect on ISP commitment, which, in turn, has a strong positive effect on ISP compliance intention. In addition, distortion of consequences moderates the relationship between social loafing and cyberloafing. Advantageous comparison moderates the relationship between cyberloafing and ISP compliance intention.

computer science, cybernetics,ergonomics
Cognitive Elaboration on Potential Outcomes and Its Effects on Employees' Information Security Policy Compliance Intention-Exploring the Key Antecedents.

Xue Yang,Wei T. Yue,Choon Lin Sia

DOI: https://doi.org/10.1007/978-3-642-29873-8_17

2012-01-01

Abstract:IS security policy is one of the essential tools to ensure the secure use of information systems and technological assets. To enhance the effectiveness of policy implementation, organizations rely on security training, education and awareness (STEA) programs to help employees understand the IS security issues of the organization. However, different levels of STEA informativeness may have conflicting effects on employees' compliance decisions. In addition, the urgency of a task may also lead employees to abandon the compliance decision occasionally. The existing corporate information security policy (ISP) could also serve as a deterrence message that would influence compliance decisions. An experimental survey was conducted to examine this phenomenon and test the related hypotheses. The results of this study can be used to inform and guide researchers and practitioners as to how to better enforce an IS security policy through better implementation of STEA programs and improved design of ISP in different task scenarios.
Factors That Influence Employees’ Security Policy Compliance: An Awareness-Motivation-Capability Perspective

Xiaofeng Chen,Liqiang Chen,Dazhong Wu

DOI: https://doi.org/10.1080/08874417.2016.1258679

2016-12-27

Journal of Computer Information Systems

Abstract:Information security policy (ISP) plays an important role in information security management in organizations. Past research investigated various factors that may impact employee behavior toward security policy compliance from the perspective of general deterrence theory (GDT), protection and motivation Theory (PMT), and rational choice theory (RCT). However, there is no unifying foundation/framework that examines all of those factors in a harmonic way so that the research findings can guide information security practices and research into the employee ISP compliance management context. Additionally, prior findings provided mixed results. This study proposes a research model based on the awareness-motivation-capability (AMC) framework, aiming to unify the factors to predict employee ISP compliance intention. We believe that a harmonic approach in managing employee ISP compliance can create optimal outcomes.

computer science, information systems
Exploring the role of intrinsic motivation in ISSP compliance: enterprise digital rights management system case

Soohyun Jeon,Insoo Son,Jinyoung Han

DOI: https://doi.org/10.1108/itp-05-2018-0256

2020-05-12

Information Technology and People

Abstract:Purpose Employee compliance with information system security policies (ISSPs) has been emphasized as a key factor in protecting information assets against insider threats. Even though previous studies have identified extrinsic factors (in the form of external pressure, rewards and social norms) influencing employee compliance, the functioning of employees' intrinsic motivation has not been clearly analyzed. Thus, the aim of this study is to explore the influence of intrinsic motivations on employees' ISSP compliance. Design/methodology/approach This study follows a survey approach and conducts structural equation modeling using WarpPLS 5.0 to test the research model and hypotheses. The survey respondents are users of an enterprise digital rights management (EDRM) system. Findings The analysis results demonstrate that work impediments, perceived responsibility and self-efficacy significantly influence the intention to comply with ISSP. Additionally, autonomy significantly affects self-efficacy and perceived responsibility. Furthermore, autonomy plays a moderating role in the relationship between work impediment and ISSP compliance intentions. Originality/value This study initiatively explores the effect of intrinsic motivations on ISSP compliance intention of employees for a specific information security system (i.e. the EDRM system). This study clarifies the enabling role of intrinsic motivations in ISSP compliance and helps organizations to understand that employee's self-motivated intention, i.e. autonomy, is an essential factor that achieves a higher level of ISSP compliance in the workplace.

information science & library science
It ain't my business: a coping perspective on employee effortful security behavior.

Zhengchuan Xu,Ken H. Guo

DOI: https://doi.org/10.1108/JEIM-10-2018-0229

2019-01-01

Journal of Enterprise Information Management

Abstract:Purpose Human factor is often cited as one of the biggest challenges for organizational information security management. The purpose of this paper is to investigate how and why employees fail to carry out required security tasks. Design/methodology/approach On the basis of coping theory, this paper develops a theoretical model to examine employee effortful security behavior (ESB). The model is tested with the data collected through a survey of computer users. Findings The results suggest that employee procrastination of security tasks and psychological detachment from security issues are two antecedents of ESB. Psychological detachment and procrastination are in turn influenced by perceived externalities of security risk and triage of business tasks over security issues by employees. Originality/value This paper contributes to the information systems security literature by providing a nuanced understanding of the antecedents and process of how employees cope with security task demands. It also offers some insights for practitioners in terms of the importance of designing and implementing security measures that are viewed as relevant to employees.
Dispositional and situational factors: influences on information security policy violations

Allen C Johnston,Merrill Warkentin,Maranda McBride,Lemuria Carter

DOI: https://doi.org/10.1057/ejis.2015.15

2016-05-01

European Journal of Information Systems

Abstract:Insiders represent a major threat to the security of an organization’s information resources. Previous research has explored the role of dispositional and situational factors in promoting compliant behavior, but these factors have not been studied together. In this study, we use a scenario-based factorial survey approach to identify key dispositional and situational factors that lead to information security policy violation intentions. We obtained 317 observations from a diverse sample of insiders. The results of a general linear mixed model indicate that dispositional factors (particularly two personality meta-traits, Stability and Plasticity) serve as moderators of the relationships between perceptions derived from situational factors and intentions to violate information security policy. This study represents the first information security study to identify the existence of these two meta-traits and their influence on information security policy violation intentions. More importantly, this study provides new knowledge of how insiders translate perceptions into intentions based on their unique personality trait mix.

information science & library science,management,computer science, information systems

[ROS1 fusion proteins, targets of foretinib].

Information Security Policy Noncompliance: an Integrative Social Influence Model.

The Impacts of Supervisory Information Communication Technology (ICT) Demands after Hours on Employee Proactive Behavior and Unethical Behavior at Work: an Attribution Perspective

From hindrance to challenge

How Supervisory ICT Demands after Hours Influence Employee Work Behavior Via Employee Attributions

Violation with Concerns of Safety: A Study on Non-Compliant Behavior and the Antecedent and Consequent Effects in Power Grid Construction

The impact of an employee's psychological contract breach on compliance with information security policies: intrinsic and extrinsic motivation

Does stress reduce violation intention? Insights from eustress and distress processes on employee reaction to information security policies

An Investigation of Employees' Intention to Comply with Information Security System—A Mixed Approach Based on Regression Analysis and fsQCA

Impact of negative emotions on violations of information security policy and possible mitigations

Technostress and its influence on employee information security policy compliance

How different rewards tend to influence employee non-compliance with information security policies

Promoting Security Behaviors in Remote Work Environments: Personal Values Shaping Information Security Policy Compliance

An Investigation of the Factors that Influence Job Performance During Extreme Events: The Role of Information Security Policies

Examining the impact of work overload on cybersecurity behavior: highlighting self-efficacy in the realm of artificial intelligence

Employees' Intention to Comply with Information Security Policies: The Impacts of Loafing and Commitment

Cognitive Elaboration on Potential Outcomes and Its Effects on Employees' Information Security Policy Compliance Intention-Exploring the Key Antecedents.

Factors That Influence Employees’ Security Policy Compliance: An Awareness-Motivation-Capability Perspective

Exploring the role of intrinsic motivation in ISSP compliance: enterprise digital rights management system case

It ain't my business: a coping perspective on employee effortful security behavior.

Dispositional and situational factors: influences on information security policy violations