Perceived Information Security Research Articles

Unrealistic optimism on information security management

Information security is a critical issue that many firms face these days. While increasing incidents of information security breaches have generated extensive publicity, previous studies repeatedly expose low levels of managerial awareness and commitment, a key obstacle to achieving a good information security posture. The main motivation of our study emanates from this phenomenon that the increased vulnerability to information security breaches is coupled with the low level of managerial awareness and commitment regarding information security threats. We report this dissonance by addressing a cognitive bias called optimistic bias. Using a survey, we study if MIS executives are subject to such a bias in their vulnerability perceptions of information security. We find that they demonstrate optimistic bias in risk perception on information security domain. The extent of this optimistic bias is greater with a distant comparison target with fewer information sharing activities. This optimistic bias is also found to be related to perception of controllability with information security threats. In order to overcome the effects of optimistic bias, firms need more security awareness training and systematic treatments of security threats instead of relying on ad hoc approach to security measure implementation.

Factors affecting perception of information security and their impacts on IT adoption and security practices

The gap between the perceived security of an information system and its real security level can influence people' decisions and behavior. The objective of this study is to find effective ways to adjust people's perception of information security, in order to enhance their intention to adopt IT appliances and compliance to security practices. Two separate experiments were conducted. In experiment I, 64 participants were asked to transfer money through an e-banking system. Their intention to adopt e-banking was measured by a questionnaire. In experiment II, 64 participants were asked to register on an online forum. Their subjective intention to create a strong password was measured by a questionnaire, and the objective strength of the passwords they created was calculated. Results of the ANOVA and the path models derived from the path analysis indicated that people's adoption intention, such as their intention to adopt e-banking, can be enhanced by changing their perceived Knowledge, Controllability and Awareness, while changing the perceived Controllability is most effective. The results also indicated that people's compliance to security practices, such as setting strong passwords for IT systems, can be enhanced by changing their perceived Knowledge, Severity and Possibility, while changing their perceived Knowledge and Severity is most effective. Implications for further research and practice were also discussed.

An Exploratory Study of the Relationships between Selected Contextual Factors and Information Security Concerns in Global Financial Services Institutions

AbstractThis paper examines the relationships between three contextual factors i.e. transparency levels, information and communication technologies (ICT) use laws, and national legal systems efficiency and information security concerns in the global financial services institutions (GFSI). This research essentially seeks to expand the breadth of knowledge provided in the 2009 Deloitte Touche Tohmatsu (DTT) survey, which reported on information security issues in GFSI. This current study used secondary data sources for its analysis. The inference from the 2009 DTT survey was that information security concerns across GFSI are being informed solely by industry-related standards or imperatives. To that end, perceptions and attitudes toward such issues were thought to remain unchanged in differing national contexts. However, this study’s data analysis showed that the perceptions of information security concerns among GFSI employees across the world compare somewhat and also differ, in other respects. Also, this...

Perception of information security

The objective of this study was to investigate people's perception of information security and to unveil the factors that influence people's perception of different threats to information security. In the survey study, 602 respondents were asked to evaluate one of 21 common threats to information security with regard to its rank related to each of the 20 threat-related features. An exploratory factor analysis was then conducted, and a six-factor structure was derived, which includes factors of Knowledge, Impact, Severity, Controllability, Possibility and Awareness. Using this factor structure, the characteristics of the five most dangerous threats (hackers, worms, viruses, Trojan horses and backdoor programs) and the five least dangerous threats (spam, piratical software, operation accidents, users' online behaviour being recorded and deviation in quality of service) were discussed and compared. The relationships between the factors and the perceived overall danger of threats were found and then tested by multiple regression analyses. Significant effects were also found in people's perception of information security related to computer experience and types of loss.

호텔기업의 정보보안 통제요소가 시스템 신뢰성에 미치는 영향

Recent advancement in information technology has helped businesses digitalize their operation into the information on the system. Consequently security attacks are growing in the form of data hacking on purpose or by accident. Information leakage, forgery, and destruction have caused damage to goals and interests to a company or even stop business operations. For hotels depending on effective management of customer relationships, information security is significant since they manage customer information stored in database through information system. This study aimed to discuss effect of hotel information security on hotel employee’s perception of information security as well as reliability of the system that manages the information. In this study, hotel information security was divided into 3 security control elements, physical, technical, and administrative security. It was to examing whether the employee's perception of system reliability has an effect to the hotel information security. A questionnaire survey was conducted on employees working at customer information management division of 23 deluxe hotels using hotel information system in Seoul. In the analysis of the effect of hotel information security on system reliability and difference by employee’s divisional characteristics.

Perception of Information Security and its Implications for Mobile Phone

Information security is of great concern to IT users, who may hesitate or refuse to adopt IT appliances because of worries about security problems. The objective of this study was to investigate the antecedences and consequences of people's perception of information security. This study included three phases. In phase 1, a six-factor structure modeling people's perception of information security was developed through a survey study and exploratory factor analysis. In phase 2, the relations between people's perception of information security and their intention to adopt IT appliances were tested through a laboratory experiment and path analysis. Significant effects were found and a path model was developed. In phase 3, the implications of people's perception of information security for mobile phone were discussed through focus group. Mobile users' perception of mobile security in seven scenarios was summarized. Three personas of mobile security were developed.

Perceptions of Information Security in the Workplace: Linking Information Security Climate to Compliant Behavior

A large number of information security breaches in the workplace result from employees’ failure to comply with organizational information security guidelines. Recent surveys report that 78% of comp...

Perceived information security, financial liability and consumer trust in electronic commerce transactions

Electronic commerce (EC) transactions are subject to multiple information security threats. Proposes that consumer trust in EC transactions is influenced by perceived information security and distinguishes it from the objective assessment of security threats. Proposes mechanisms of encryption, protection, authentication, and verification as antecedents of perceived information security. These mechanisms are derived from technological solutions to security threats that are visible to consumers and hence contribute to actual consumer perceptions. Tests propositions in a study of 179 consumers and shows a significant relationship between consumers’ perceived information security and trust in EC transactions. Explores the role of limited financial liability as a surrogate for perceived security. However, the findings show that there is a minimal effect of financial liability on consumers’ trust in EC. Engenders several new insights regarding the role of perceived security in EC transactions.