When Convenience Trumps Security: Defining Objectives for Security and Usability of Systems

Abstract

Security and usability of systems continues to be an important topic for managers and academics alike. In this paper we propose two instruments for assessing security and usability of systems. These instruments were developed in two phases. In Phase 1, using the value-focused thinking approach and interviews with 35 experts, we identified 16 clusters of means and 8 clusters of fundamental objectives. In phase 2 drawing on a sample of 201 users we administered a survey to purify, ensure reliability, and unidimensionality of the two instruments. This resulted in 15 means objectives, organized into four categories (minimize system interruptions and licensing restrictions, maximize information retrieval, maximize system aesthetics, and maximize data quality) and 12 fundamental objectives grouped into four categories (maximize standardization and integration, maximize ease of use, maximize system capability, and enhance system related communication). Collectively the objectives offer a useful basis for assessing the extent to which security and usability has been achieved in systems.