Dispositional and situational factors: influences on information security policy violations
Dispositional and situational factors: influences on information security policy violations
复制标题
DOI：
10.1057/ejis.2015.15
复制
发表时间：
2016-02
影响因子：
9.5
通讯作者：
Allen C. Johnston;Merrill Warkentin;M. McBride;Lemuria D. Carter
中科院分区：
文献类型：
--
作者：
Allen C. Johnston;Merrill Warkentin;M. McBride;Lemuria D. Carter
内部人员是对组织信息资源安全的主要威胁。以往的研究已经探索了性格因素和情景因素在促进顺从行为中的作用，但这些因素还没有被一起研究。在这项研究中，我们使用基于情景的析因调查方法来识别导致信息安全政策违反意图的关键性格因素和情景因素。我们从不同的内部人士样本中获得了317条观察结果。一般线性混合模型的结果表明，倾向因素(特别是稳定性和可塑性这两个人格元特征)对情境因素产生的感知与违反信息安全政策的意图之间的关系起到调节作用。本研究是信息安全研究中首次发现这两个元特征的存在及其对信息安全政策违反意图的影响。更重要的是，这项研究为内部人如何根据他们独特的人格特质组合将感知转化为意图提供了新的知识。
Insiders represent a major threat to the security of an organization’s information resources. Previous research has explored the role of dispositional and situational factors in promoting compliant behavior, but these factors have not been studied together. In this study, we use a scenario-based factorial survey approach to identify key dispositional and situational factors that lead to information security policy violation intentions. We obtained 317 observations from a diverse sample of insiders. The results of a general linear mixed model indicate that dispositional factors (particularly two personality meta-traits, Stability and Plasticity) serve as moderators of the relationships between perceptions derived from situational factors and intentions to violate information security policy. This study represents the first information security study to identify the existence of these two meta-traits and their influence on information security policy violation intentions. More importantly, this study provides new knowledge of how insiders translate perceptions into intentions based on their unique personality trait mix.