Cyber-security, Privacy, Legal and Ethical Issues in IS

Loading...

Media is loading
 

Paper Type

Complete

Paper Number

1453

Description

For novice non-organizational users (NNOUs)- individuals who are not subject to security guidelines of a firm and who possess no or minimal information security training, feedback messages are among the only feasible solutions that can guide them towards better security performance. However, it is not clear which combinations of feedback messages are the most effective for such users as existing findings are scarce and, in the case of actual performance, non-existent. Utilizing an app developed for this study and drawing on Prospect Theory and Construal-Level Theory, we conducted a 2×2×2 (framing valence: positive/negative × framing type: attribute/goal × construal level: high/low) between-subjects design study to assess the effect of feedback messages on users’ security settings selection. Our findings suggest that messages which are low-level, negative, and framed around user goals are most effective. Our findings extend the literature and provide insight into developing adaptive feedback mechanisms.

Share

COinS
 
Dec 14th, 12:00 AM

Role of Feedback in Improving Novice Users’ Security Performance Using Construal Level and Valance Framing

For novice non-organizational users (NNOUs)- individuals who are not subject to security guidelines of a firm and who possess no or minimal information security training, feedback messages are among the only feasible solutions that can guide them towards better security performance. However, it is not clear which combinations of feedback messages are the most effective for such users as existing findings are scarce and, in the case of actual performance, non-existent. Utilizing an app developed for this study and drawing on Prospect Theory and Construal-Level Theory, we conducted a 2×2×2 (framing valence: positive/negative × framing type: attribute/goal × construal level: high/low) between-subjects design study to assess the effect of feedback messages on users’ security settings selection. Our findings suggest that messages which are low-level, negative, and framed around user goals are most effective. Our findings extend the literature and provide insight into developing adaptive feedback mechanisms.

When commenting on articles, please be friendly, welcoming, respectful and abide by the AIS eLibrary Discussion Thread Code of Conduct posted here.