Journal
COMPUTERS & SECURITY
Volume 104, Issue -, Pages -Publisher
ELSEVIER ADVANCED TECHNOLOGY
DOI: 10.1016/j.cose.2021.102222
Keywords
Cybersecurity; Human behaviour; Time pressure; Stress; Information security policy
Categories
Ask authors/readers for more resources
This study explores the relationship between occupational stress, information security policy designs, and security behavior, finding that time constraints can lead to non-compliance with ISP and that punishment can mitigate the effects of stress on ISP non-compliance. Additionally, the study extends previous findings by examining how stressful work environments and ISP designs shape compliance behavior.
Based on the transactional theory of stress, the study sets out to explore the relationship between occupational stress, information security policy (ISP) designs, and security behaviour. Results from an in-basket experiment reveal that stress elicited by time constraints leads to ISP non-compliance behaviour in the workplace. In addition, the results of the study show that punishment can buffer the effect of perceived stress on ISP non-compliance. While existing research on stress and ISP compliance focus on stress induced by security requirements, our study extends these findings by providing insights how stressful work environments and ISP designs shape ISP compliance behaviour. (C) 2021 Elsevier Ltd. All rights reserved.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available