Punishment and ethics deterrents: A study of insider security contravention

Authors:
Michael Workman;John Gathegi
Affiliations:
College of Business, Florida Institute of Technology, Melbourne, FL 32901;College of Information, Florida State University, Tallahassee, FL 32306–2100
Venue:
Journal of the American Society for Information Science and Technology
Year:
2007

Citing 0
Cited 8

Security lapses and the omission of information security measures: A threat control model and empirical test

Computers in Human Behavior
Gaining Access with Social Engineering: An Empirical Study of the Threat

Information Systems Security
User Awareness of Security Countermeasures and Its Impact on Information Systems Misuse: A Deterrence Approach

Information Systems Research
A field study of corporate employee monitoring: Attitudes, absenteeism, and the moderating influences of procedural justice perceptions

Information and Organization
Rash impulsivity, vengefulness, virtual-self and amplification of ethical relativism on cyber-smearing against corporations

Computers in Human Behavior
Understanding Nonmalicious Security Violations in the Workplace: A Composite Behavior Model

Journal of Management Information Systems
Beyond deterrence: an expanded view of employee computer abuse

MIS Quarterly
The economic impact of cyber terrorism

The Journal of Strategic Information Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

Information security is a growing concern among the general population. For instance, it has been estimated by the U.S. Department of Justice (2004) that one in three people will become victims of identity theft at some point in their lifetime. The bulk of the research into information security has gone into the investigation of technological aspects of security, and there are gaps in the literature relative to contravention of security measures. Drawing from deterrence theory and using the theory of planned behavior as a general framework, this empirical field study investigated the effects of punishment and ethics training on behaviors related to contravention of information security measures among information professionals to fill an important gap in the literature. We found that both punishment and ethics training can be effective in mitigating the threat of software and information security, but that these depend on certain underlying motivational factors of individuals. The results of this study suggest a need to develop and refine the theoretical models, and we offer suggestions for getting at the root of behavioral issues surrounding information security. © 2007 Wiley Periodicals, Inc.