Loading...
Motivation and opportunity based model to reduce information security insider threats in organisations
Safa, Nader Sohrabi Maple, Carsten Watson, Tim Von Solms, Rossouw
Safa, Nader Sohrabi
Maple, Carsten
Watson, Tim
Von Solms, Rossouw
Editors
Other contributors
Affiliation
Epub Date
Issue Date
2018-03-05
Submitted date
Alternative
Abstract
Information technology has brought with it many advantages for organisations, but information security is still a major concern for organisations which rely on such technology. Users, whether with intent or through negligence, are a great source of potential of risk to information assets. A lack of awareness, negligence, resistance, disobedience, apathy and mischievousness are root causes of information security incidents in organisations. As such, insider threats have attracted the attention of a number of experts in this domain. Two particularly important considerations when exploring insider threats are motivation and opportunity. Two fundamental theories relating to these phenomena, and on which the research presented in this paper relies, are Social Bond Theory (SBT), which can be used to help undermine motivation to engage in misbehaviour, and Situational Crime Prevention Theory (SCPT), which can be used to reduce opportunities for misbehaviour. The results of our data analysis show that situational prevention factors such as increasing the effort and risk involved in a crime, reducing the rewards and removing excuses can significantly promotes the adoption of negative attitudes towards misbehaviour, though reducing provocations does not have any effect on attitudes. Further, social bond factors such as a commitment to organisational policies and procedures, involvement in information security activities and personal norms also significantly promotes the adoption of negative attitudes towards misbehaviour. However, attachment does not significantly promote an attitude of misbehaviour avoidance on the part of employees. Finally, our findings also show that a negative attitude towards misbehaviour influences the employees’ intentions towards engaging in misbehaviour positively, and this in turn reduces insider threat behaviour. The outputs of this study shed some light on factors which play a role in reducing misbehaviour in the domain of information security for academics and practitioners.
Citation
Sohrabi Safa, N., Maple, C., Watson, T. and Von Solms, R. (2018) Motivation and opportunity based model to reduce information security insider threats in organisations. Journal of Information Security and Applications, 40 . pp. 247-257. doi:10.1016/j.jisa.2017.11.001
Publisher
Research Unit
PubMed ID
PubMed Central ID
Embedded videos
Additional Links
Type
Journal article
Language
en
Description
This is an accepted manuscript of an article published by Elsevier in Journal of Information Security and Applications, available online: https://doi.org/10.1016/j.jisa.2017.11.001
The accepted version of the publication may differ from the final published version.
Series/Report no.
ISSN
2214-2126