The Role of Decision-Making Styles in Shaping Cybersecurity Compliance Behavior
Source abstract
Abstract
The growing number of attacks on crucial cyber networks is one of humanity’s most significant security threats. Combining technological solutions with the convenient cybersecurity behavior of the human factor is necessary to reduce the effects of these attacks. In this study, the impact of individual decision-making styles on cybersecurity compliance behavior was examined. A conceptual framework was developed based on the protective motivation theory, and it was tested with a data set representing the survey results of 668 employees and students with work experience. Regression analyses were performed to evaluate the impacts of individuals’ decision-making styles on cybersecurity compliance behaviors. Results showed that the decision-making styles of individuals affected their cybersecurity compliance behaviors, and these effects showed significant differences according to their decision-making styles. The study also confirmed that security awareness was another important indicator of cybersecurity compliance behavior. Our research provided new insight into the effects of individual decision-making styles on cybersecurity compliance behavior.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Information and Cyber Security · Network Security and Intrusion Detection · Cybercrime and Law Enforcement Studies
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Faculty of Business Administration, Gebze Technical University, Kocaeli 41400, Turkey
References (55)
Show source-provided references
1. (2023, April 02). Verizon, Data Breach Investigations Report. Available online: https://www.verizon.com/business/resources/reports/2022/dbir/2022-data-breach-investigations-report-dbir.pdf.10.12968/S1361-3723(22)70578-7 ↗
2. An integrative model of information security policy compliance with psychological contract: Examining a bilateral perspective10.1016/j.cose.2016.12.016 ↗
3. Information security policy compliance: An empirical study of rationality-based beliefs and information security awareness10.2307/25750690 ↗
4. Information systems security policy compliance: An empirical study of the effects of socialisation, influence, and cognition10.1016/j.im.2013.10.001 ↗
5. Alsmadi, D., Maqousi, A., and Abuhussein, T. (2022). Engaging in cybersecurity proactive behavior: Awareness in COVID-19 age. Kybernetes, ahead-of-print.10.1108/K-08-2022-1104 ↗
6. Organizations’ information security policy compliance: Stick or carrot approach?10.2753/MIS0742-1222290305 ↗
7. Toward a unified model of information security policy compliance10.25300/MISQ/2018/13853 ↗
8. Don’t make excuses! Discouraging neutralization to reduce IT policy violation10.1016/j.cose.2013.05.006 ↗
9. Guidelines for improving the contextual relevance of field surveys: The case of information security policy violations10.1057/ejis.2012.59 ↗
10. The role of cybersecurity and policy awareness in shifting employee compliance attitudes: Building supply chain capabilities10.1016/j.ijinfomgt.2022.102520 ↗
11. Motivating IS security compliance: Insights from habit and protection motivation theory10.1016/j.im.2012.04.002 ↗
12. Information security conscious care behaviour formation in organizations10.1016/j.cose.2015.05.012 ↗
13. Investigating the impact of cybersecurity policy awareness on employees’ cybersecurity behavior10.1016/j.ijinfomgt.2018.10.017 ↗
14. What do systems users have to fear? Using fear appeals to engender threats and fear that motivate protective security behaviors10.25300/MISQ/2015/39.4.5 ↗
15. Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness10.1016/j.dss.2009.02.005 ↗
16. Continuance of protective security behavior: A longitudinal study10.1016/j.dss.2016.09.013 ↗
17. Practicing safe computing: A multimethod empirical examination of home computer user security behavioral intentions10.2307/25750694 ↗
18. Human factors in cybersecurity; examining the link between Internet addiction, impulsivity, attitudes towards cybersecurity, and risky cybersecurity behaviours10.1016/j.heliyon.2017.e00346 ↗
19. Protection motivation and deterrence: A framework for security policy compliance in organisations10.1057/ejis.2009.6 ↗
20. Learning to cope with information security risks regarding mobile device loss or theft: An empirical examination10.1016/j.im.2015.03.002 ↗
21. If someone is watching, I’ll do what I’m asked: Mandatoriness, control, and information security10.1057/ejis.2009.8 ↗
22. Cybersecurity research: A review of current research topics10.1142/S2424862218500148 ↗
23. Egelman, S., and Peer, E. (2015, January 18–23). Scaling the Security wall: Developing a Security Behavior Intentions Scale (SeBIS). Proceedings of the 33rd Annual ACM Conference on Human Factors in Computing Systems, Seoul, Republic of Korea.10.1145/2702123.2702249 ↗
24. Correlating human traits and cyber security behavior intentions10.1016/j.cose.2017.11.015 ↗
25. Cybersecurity compliance behavior: Exploring the influences of individual decision style and other antecedents10.1016/j.ijinfomgt.2019.102056 ↗
26. A protection motivation theory of fear appeals and attitude change110.1080/00223980.1975.9915803 ↗
27. Cacioppo, J.T., and Petty, R.E. (1983). Social Psychophysiology, Guilford.
28. Kerr, S. (1979). Organizational Behavior, Grid Publishing.
29. Decision-making style: The development and assessment of a new measure10.1177/0013164495055005017 ↗
30. Decision-making style: Habit, style or both?10.1016/S0191-8869(03)00162-4 ↗
31. Rowe, A.J., and Mason, R.O. (1987). Managing with Style: A Guide to Understanding, Assessing, and Improving Decision Making, Jossey-Bass.
32. A model of career decision making for college students10.1016/0001-8791(79)90065-4 ↗
33. Rowe, A.J., and Boulgarides, J.D. (1992). Managerial Decision Making: A Guide to Successful Business Decisions, McMillan.
34. A factor analytic investigation of career decision-making styles10.1016/0001-8791(85)90029-6 ↗
35. Cultural differences in career decision-making styles and self-efficacy10.1006/jvbe.1999.1745 ↗
36. The relation between career decision-making strategies and person–job fit: A study of job changers10.1016/S0001-8791(03)00034-4 ↗
37. Teenagers’ perceptions of online privacy and coping behaviors: A risk–benefit appraisal approach10.1207/s15506878jobem4901_6 ↗
38. Woon, I., Tan, G.W., and Low, R. (2005, January 12–16). A Protection Motivation Theory Approach to Home Wireless Security. Proceedings of the ICIS 2005 Proceedings, Caen, France.
39. Understanding information systems security policy compliance: An integration of the theory of planned behavior and the protection motivation theory10.1016/j.cose.2011.10.007 ↗
40. Bubukayr, M.A.S., and Almaiah, M.A. (2021, January 14–15). Cybersecurity Concerns in Smart-Phones and Applications: A Survey. Proceedings of the 2021 International Conference on Information Technology (ICIT), Amman, Jordan.10.1109/ICIT52682.2021.9491691 ↗
41. Alamer, M., and Almaiah, M.A. (2021, January 22–25). Cybersecurity in Smart City: A Systematic Mapping Study. Proceedings of the 2021 International Conference on Information Technology (ICIT), Guangzhou, China.10.1109/ICIT52682.2021.9491123 ↗
42. Pahnila, S., Siponen, M., and Mahmood, A. (2022, January 4–7). Employees’ Behavior towards IS Security Policy Compliance. Proceedings of the 40th Annual Hawaii International Conference on System Sciences (HICSS’07), Hyatt Regency Maui, HI, USA.
43. Factors influencing the information security behaviour of IT employees10.1080/0144929X.2019.1623322 ↗
44. Threat or coping appraisal: Determinants of SMB executives’ decision to adopt anti-malware software10.1057/ejis.2009.11 ↗
45. Information privacy concerns, antecedents and privacy measure use in social networking sites: Evidence from Malaysia10.1016/j.chb.2012.07.008 ↗
46. Gender difference and employees’ cybersecurity behaviors10.1016/j.chb.2016.12.040 ↗
47. Studying users’ computer security behavior: A health belief perspective10.1016/j.dss.2008.11.010 ↗
48. Analysis of end user security behaviors10.1016/j.cose.2004.07.001 ↗
49. Exploring the factors that influence the cybersecurity behaviors of young adults10.1016/j.chb.2022.107376 ↗
50. Self-efficacy in information security: Its influence on end users’ information security practice behavior10.1016/j.cose.2009.05.008 ↗
51. Keeping our network safe: A model of online protection behaviour10.1080/01449290600879344 ↗
52. Hair, J.F., Black, W.C., Babin, B.J., Anderson, R.E., and Tatham, R.L. (2006). Multivariate Data Analysis, Pearson Prentice Hall.
53. Lower bounds on sample size in structural equation modeling10.1016/j.elerap.2010.07.003 ↗
54. DeVellis, R.F. (2003). Scale Development: Theory and Applications, Sage Publications, Inc.
55. LaRose, R., Rifon, N., Liu, S., and Lee, D. (2005, January 26–30). Understanding Online Safety Behavior: A Multivariate Model. Proceedings of the 55th Annual Conference of the International Communication Association, New York, NY, USA.