Bridging the divide : A qualitative comparison of information security thought patterns between information security professionals and ordinary organizational insiders

Research output: Journal Publications and Reviews (RGC: 21, 22, 62)21_Publication in refereed journal

67 Scopus Citations
View graph of relations

Author(s)

  • Clay Posey
  • Tom L. Roberts
  • Paul Benjamin Lowry
  • Ross T. Hightower

Related Research Unit(s)

Detail(s)

Original languageEnglish
Pages (from-to)551-567
Journal / PublicationInformation and Management
Volume51
Issue number5
Online published13 Apr 2014
Publication statusPublished - Jul 2014

Abstract

Organizational insiders have considerable influence on the effectiveness of information security efforts. However, most research conducted in this area fails to examine what these individuals believe about organizational security efforts. To help bridge this gap, this study assesses the mindset of insiders regarding their relationship with information security efforts and compares it against the mindset of information security professionals. Interviews were conducted with 22 ordinary insiders and 11 information security professionals, an effort that provides insight into how insiders gauge the efficacy of recommended responses to information security threats. Several key differences between insiders' and professionals' security mindsets are also discussed. © 2014 Elsevier B.V.

Research Area(s)

  • Behavioral information security, Organizational insiders, Protection motivation theory, Qualitative analysis, Risk assessment, Security professionals

Citation Format(s)

Bridging the divide : A qualitative comparison of information security thought patterns between information security professionals and ordinary organizational insiders. / Posey, Clay; Roberts, Tom L.; Lowry, Paul Benjamin; Hightower, Ross T.

In: Information and Management, Vol. 51, No. 5, 07.2014, p. 551-567.

Research output: Journal Publications and Reviews (RGC: 21, 22, 62)21_Publication in refereed journal