Promoting Security Behaviors in Remote Work Environments: Personal Values Shaping Information Security Policy Compliance

References

• Bardi A, Schwartz SH (2003) Values and behavior: Strength and structure of relations. Pers. Soc. Psychol. Bull. 29(10):1207–1220.Crossref, Google Scholar
• Boss S, Galletta D, Lowry PB, Moody GD, Polak P (2015) What do systems users have to fear? Using fear appeals to engender threats and fear that motivate protective security behaviors. MIS Quart. 39(4):837–864.Crossref, Google Scholar
• Boudreau M-C, Gefen D, Straub DW (2001) Validation in information systems research: A state-of-the-art assessment. MIS Quart. 25(1):1–16.Crossref, Google Scholar
• Chu X, Luo XR, Chen Y (2019) A systematic review on cross-cultural information systems research: Evidence from the last decade. Inform. Management 56(3):403–417.Crossref, Google Scholar
• Cieciuch J, Davidov E, Vecchione M, Beierlein C, Schwartz SH (2014) The cross-national invariance properties of a new scale to measure 19 basic human values: A test across eight countries. J. Cross Cult. Psychol. 45(5):764–776.Crossref, Google Scholar
• Cisłak A, Wójcik A, Białobrzeska O (2022) Social position and personal vs. social focus: A multinational study of managerial values. Soc. Psychol. Bull. 17:1–26.Crossref, Google Scholar
• Cram WA, D’arcy J, Proudfoot JG (2019) Seeing the forest and the trees: A meta-analysis of the antecedents to information security policy compliance. MIS Quart. 43(2):525–554.Crossref, Google Scholar
• Crossler RE, Andoh-Baidoo FK, Menard P (2019) Espoused cultural values as antecedents of individuals’ threat and coping appraisal toward protective information technologies: Study of US and Ghana. Inform. Management 56(5):754–766.Crossref, Google Scholar
• Crossler RE, Di Gangi PM, Johnston AC, Bélanger F, Warkentin M (2018) Providing theoretical foundations: Developing an integrated set of guidelines for theory adaptation. Comm. Assoc. Inform. Systems 43(1):566–597.Google Scholar
• Crossler RE, Johnston AC, Lowry PB, Hu Q, Warkentin M, Baskerville R (2013) Future directions for behavioral information security research. Comput. Secur. 32:90–101.Crossref, Google Scholar
• Dey D, Ghoshal A, Lahiri A (2022) Circumventing circumvention: An economic analysis of the role of education and enforcement. Management Sci. 68(4):2914–2931.Link, Google Scholar
• Elo J, Lumivalo J, Tuunanen T (2022) A personal values-based approach to understanding users’ co-creative and co-destructive gaming experiences in augmented reality mobile games. Pacific Asia J. Assoc. Inform. Systems 14(5).Google Scholar
• Feldman G, Chao MM, Farh J-L, Bardi A (2015) The motivation and inhibition of breaking the rules: Personal values structures predict unethicality. J. Res. Pers. 59:69–80.Crossref, Google Scholar
• Felstead A, Henseke G (2017) Assessing the growth of remote working and its consequences for effort, well‐being and work‐life balance. New Technol. Work Employ. 32(3):195–212.Crossref, Google Scholar
• Fornell C, Larcker DF (1981) Structural Equation Models with Unobservable Variables and Measurement Error: Algebra and Statistics (SAGE Publications, Thousand Oaks, CA).Google Scholar
• Frimer JA, Walker LJ (2009) Reconciling the self and morality: An empirical model of moral centrality development. Developmental Psych. 45(6):1669–1681.Google Scholar
• Gavoille N, Hazans M (2022) Personality traits, remote work and productivity. IZA Discussion Paper, No. 15486, Institute of Labor Economics (IZA), Bonn.Google Scholar
• Gillet N, Morin AJS, Huyghebaert-Zouaghi T, Austin S, Fernet C (2022) How and when does personal life orientation predict well-being? Career Development Quart. 70:240–255.Google Scholar
• Greulich M, Lins S, Pienta D, Thatcher JB, Sunyaev A (2024) Exploring contrasting effects of trust in organizational security practices and protective structures on employees’ security-related precaution taking. Inform. Systems Res. Forthcoming.Link, Google Scholar
• Hair JF, Hult GTM, Ringle C, Sarstedt M (2016) A Primer on Partial Least Squares Structural Equation Modeling (PLS-SEM) (Sage publications, Thousand Oaks, CA).Google Scholar
• Hayes AF (2018) Partial, conditional, and moderated moderated mediation: Quantification, inference, and interpretation. Commun. Monogr. 85(1):4–40.Crossref, Google Scholar
• Henseler J, Ringle CM, Sarstedt M (2015) A new criterion for assessing discriminant validity in variance-based structural equation modeling. J. Acad. Mark. Sci. 43(1):115–135.Crossref, Google Scholar
• Hofstede G (1983) National cultures in four dimensions: A research-based theory of cultural differences among nations. Int. Stud. Manage. Organ. 13(1–2):46–74.Google Scholar
• Hong W, Chan FK, Thong JY, Chasalow LC, Dhillon G (2014) A framework and guidelines for context-specific theorizing in information systems research. Inf. Syst. Res. 25(1):111–136.Link, Google Scholar
• IBM (2023) Cost of a data breach report. Accessed January 14, 2024, https://www.ibm.com/reports/data-breach.Google Scholar
• Johnson V, Torres R, Maurer C, Guerra K, Srivastava S, Mohit H (2023) The 2022 SIM IT issues and trends study. MIS Quart. Executive 23(1):86–124.Google Scholar
• Johnston AC, Warkentin M (2010) Fear appeals and information security behaviors: An empirical study. MIS Quart. 34(3):549–566.Crossref, Google Scholar
• Lechner C, Beierlein C, Davidov E, Schwartz SH (2024) Measuring the 4 higher-order values in Schwartz’s theory: A validation of a 17-item inventory. J. Pers. Assess. 1–14. Crossref, Google Scholar
• Lowry PB, Gaskin J (2014) Partial Least Squares (PLS) structural equation modeling (SEM) for building and testing behavioral causal theory: When to choose it and how to use it. IEEE Trans. Prof. Commun. 57(2):123–146.Crossref, Google Scholar
• Lowry PB, Dinev T, Willison R (2017) Why security and privacy research lies at the centre of the Information Systems (IS) artefact: Proposing a bold research agenda. Eur. J. Inform. Systems 26(6):546–563.Crossref, Google Scholar
• Malhotra Y, Galletta DF, Kirsch LJ (2008) How endogenous motivations influence user intentions: Beyond the dichotomy of extrinsic and intrinsic user motivations. J. Management Inform. Systems 25(1):267–300.Crossref, Google Scholar
• McKinsey GI (2023) How hybrid work has changed the way people work, live, and shop. Accessed January 14, 2024, https://www.mckinsey.com/mgi/our-research/empty-spaces-and-hybrid-places-chapter-1#/.Google Scholar
• Miller B, Chiodo B (2008) Academic entitlement: Adapting the equity preference questionnaire for a university setting. Southern Management Association Meeting, St. Pete Beach, FL.Google Scholar
• Moody GD, Siponen M, Pahnila S (2018) Toward a unified model of information security policy compliance. MIS Quart. 42(1):285–311.Crossref, Google Scholar
• Nyarko DA, Fong RC-w (2023) Cyber security compliance among remote workers. Jahankhani H, ed. Cybersecurity in the Age of Smart Societies (Springer International Publishing, Springer, Cham, Switzerland), 343–369.Google Scholar
• Peer E, Rothschild DM, Evernden Z, Gordon A, Damer E (2022) Data quality of platforms and panels for online behavioral research. Behavioral Res. Methods 54:1643–1662.Google Scholar
• Perez C (2022) Your employees are the weakest link in your cybersecurity chain (EY Cybersecurity Series, Issue). Accessed August 18, 2023, https://www.ey.com/en_ca/cybersecurity/your-employees-are-the-weakest-link-in-your-cybersecurity-chain.Google Scholar
• Rahamti M (2023) How to navigate cybersecurity risks in the era of remote work. The CEO Magazine (October 16). https://www.theceomagazine.com/opinion/cybersecurity-threats/.Google Scholar
• Ringle CM, Wende S, Becker JM (2022) SmartPLS 4. Oststeinbek: SmartPLS. https://www.smartpls.com.Google Scholar
• Rohan MJ (2000) A rose by any name? The values construct. Pers. Soc. Psychol. Rev. 4(3):255–277.Crossref, Google Scholar
• Sagiv L, Roccas S (2021) How do values affect behavior? Let me count the ways. Pers. Soc. Psychol. Rev. 25(4):295–316.Crossref, Google Scholar
• Sagiv L, Schwartz SH (2022) Personal values across cultures. Annu. Rev. Psychol. 73:517–546.Crossref, Google Scholar
• Sarstedt M, Henseler J, Ringle CM (2011) Multigroup analysis in partial least squares (PLS) path modeling: Alternative methods and empirical results. Measurement and Research Methods in International Marketing (Emerald Group Publishing Limited, Bingley, UK), 195–218.Crossref, Google Scholar
• Sarstedt M, Hair JF Jr, Cheah J-H, Becker J-M, Ringle CM (2019) How to specify, estimate, and validate higher-order constructs in PLS-SEM. Australas. Marketing J. 27(3):197–211.Crossref, Google Scholar
• Schwartz SH (1992) Universals in the content and structure of values: Theoretical advances and empirical tests in 20 countries. Zanna MP, ed. Advances in Experimental Social Psychology, vol. 25 (Academic Press, New York), 1–65.Google Scholar
• Schwartz SH (1994) Are there universal aspects in the structure and contents of human values? J. Soc. Issues 50(4):19–45.Google Scholar
• Schwartz SH, Cieciuch J, Vecchione M, Torres C, Dirilem-Gumus O, Butenko T (2017) Value tradeoffs and behavior in five countries: Validating 19 refined values. Eur. J. Soc. Psychol. 47:241–258.Crossref, Google Scholar
• Schwartz SH, Cieciuch J, Vecchione M, Davidov E, Fischer R, Beierlein C, Ramos A, Verkasalo M, Lönnqvist JE, Demirutku K (2012) Refining the theory of basic individual values. J. Personality Soc. Psychol. 103(4):663–688.Crossref, Google Scholar
• Simmering MJ, Fuller CM, Richardson HA, Ocal Y, Atinc GM (2015) Marker variable choice, reporting, and interpretation in the detection of common method variance: A review and demonstration. Organ. Res. Methods 18(3):473–511.Crossref, Google Scholar
• Siponen M, Vance A (2010) Neutralization: New insights into the problem of employee information systems security policy violations. MIS Quart. 34(3):487–502.Crossref, Google Scholar
• Tams S, Dulipovici A, Thatcher JB, Craig K, Srite M (2020) The role of basic human values in knowledge sharing: How values shape the postadoptive use of electronic knowledge repositories. J. Assoc. Inform. Systems 21(1):201–237.Google Scholar
• Vance A, Lowry PB, Eggett D (2013) Using accountability to reduce access policy biolations in information dystems. J. Management Inform. Systems 29(4):263–290.Crossref, Google Scholar
• Vance A, Lowry PB, Eggett DL (2015) Increasing accountability through user-interface design artifacts: A new approach to addressing the problem of access-policy violations. MIS Quart. 39(2):345–366.Crossref, Google Scholar
• Verizon (2023) 2023 data breach investigation report. Accessed January 14, 2024, https://www.verizon.com/business/resources/reports/dbir.Google Scholar
• Weinstein Z, Roccas S, Gandal N (2020) Personal values and cyber risk-taking. Preprint, submitted October 18, 2020, http://dx.doi.org/10.2139/ssrn.3714173.Google Scholar
• Whitty MT, Moustafa N, Grobler M (2024) Cybersecurity when working from home during COVID-19: Considering the human factors. J. Cybersecurity 10(1):1–11.Crossref, Google Scholar
• Zhang D, Lowry PB (2009) Issues, limitations, and opportunities in cross-cultural research on collaborative software in information systems. E-Collaboration: Concepts, Methodologies, Tools, and Applications (IGI Global, Hershey, PA), 553–585.Crossref, Google Scholar