Description

This study examined factors influencing employees’ participation in non-malicious, information systems security deviant behavior (N-ISSDB) (e.g., e.g., connecting computers to the Internet through an insecure wireless network, not disposing and destroying all unneeded sensitive documents and information on computer in a timely manner, and opening emails from unverified senders) from the theoretical lens of formal control mechanisms and formal sanctions. Empirical data was collected from 338 professionals based in the United States of America. Relevant hypotheses were formulated and tested using the partial least squares technique. The results indicate that detection control mechanism (i.e., evaluation/monitoring) and deterrence countermeasures or factors (i.e., punishment certainty and punishment severity) have negative association with employees’ participation in N-ISSDB. The data did not show that control mechanism related to reward and specifications have meaningful roles in dissuading employees’ engagement in N-ISSDB.

Share

COinS
 
Aug 10th, 12:00 AM

Factors Influencing Employees’ Participation in Non-Malicious, Information Systems Security Deviant Behavior: Focus on Formal Control Mechanisms and Sanctions

This study examined factors influencing employees’ participation in non-malicious, information systems security deviant behavior (N-ISSDB) (e.g., e.g., connecting computers to the Internet through an insecure wireless network, not disposing and destroying all unneeded sensitive documents and information on computer in a timely manner, and opening emails from unverified senders) from the theoretical lens of formal control mechanisms and formal sanctions. Empirical data was collected from 338 professionals based in the United States of America. Relevant hypotheses were formulated and tested using the partial least squares technique. The results indicate that detection control mechanism (i.e., evaluation/monitoring) and deterrence countermeasures or factors (i.e., punishment certainty and punishment severity) have negative association with employees’ participation in N-ISSDB. The data did not show that control mechanism related to reward and specifications have meaningful roles in dissuading employees’ engagement in N-ISSDB.