We found a match
Your institution may have access to this item. Find your institution then sign in to continue.
- Title
The Role of Extra-Role Behaviors and Social Controls in Information Security Policy Effectiveness.
- Authors
Shih-Chieh Hsu, Jack; Sheng-Pao Shih; Yu Wen Hung; Lowry, Paul Benjamin
- Abstract
Although most behavioral security studies focus on organizational in-role behaviors such as information security policy (ISP) compliance, the role of organizational extra-role behaviors—security behaviors that benefit organizations but are not specified in ISPs—has long been overlooked. This study examines (1) the consequences of organizational in-role and extra-role security behaviors on the effectiveness of ISPs and (2) the role of formal and social controls in enhancing in-role and extra-role security behaviors in organizations. We propose that both in-role security behaviors and extra-role security behaviors contribute to ISP effectiveness. Furthermore, based on social control theory, we hypothesize that social control can boost both in- and extrarole security behaviors. Data collected from practitioners—including information systems (IS) managers and employees at many organizations—confirmed most of our hypotheses. Survey data from IS managers substantiated the importance of extra-role behaviors in improving ISP effectiveness. Paired data, collected from managers and employees in the same organizations, indicated that formal control and social control individually and interactively enhance both in- and extra-role security behaviors. We conclude by discussing the implications of this research for academics and practitioners, along with compelling future research possibilities.
- Subjects
INFORMATION technology security; SECURITY management; SOCIAL control; DATA analysis; SOCIAL security laws
- Publication
Information Systems Research, 2015, Vol 26, Issue 2, p282
- ISSN
1047-7047
- Publication type
Article
- DOI
10.1287/isre.2015.0569