A1 Alkuperäisartikkeli tieteellisessä aikakauslehdessä
Executives’ Commitment to Information Security : Interaction between the Preferred Subordinate Influence Approach (PSIA) and Proposal Characteristics (2020)

Menon, N. M., & Siponen, M. (2020). Executives’ Commitment to Information Security : Interaction between the Preferred Subordinate Influence Approach (PSIA) and Proposal Characteristics. Data Base for Advances in Information Systems, 51(2), 36-53. https://doi.org/10.1145/3400043.3400047

JYU-tekijät tai -toimittajat

Julkaisun tiedot

Julkaisun kaikki tekijät tai toimittajat: Menon, Nirup M.; Siponen, Mikko

Lehti tai sarja: Data Base for Advances in Information Systems

ISSN: 1532-0936

eISSN: 2331-1622

Julkaisuvuosi: 2020

Volyymi: 51

Lehden numero: 2

Artikkelin sivunumerot: 36-53

Kustantaja: Association for Computing Machinery

Julkaisumaa: Yhdysvallat (USA)

Julkaisun kieli: englanti

DOI: https://doi.org/10.1145/3400043.3400047

Pysyvä verkko-osoite: https://dl.acm.org/citation.cfm?id=J219

Julkaisun avoin saatavuus: Ei avoin

Julkaisukanavan avoin saatavuus: 

Julkaisu on rinnakkaistallennettu (JYX): https://jyx.jyu.fi/handle/123456789/63666

Tiivistelmä

Two aspects of decision-making on information security spending, executives' varying preferences for how proposals should be presented and the framing of the proposals, are developed. The proposed model of executives' commitment to information security is an interaction model (in addition to the cost of a security solution, and the risk and the potential loss of a security threat) consisting of the interaction between an executive's preferred subordinate influence approach (PSIA), rational or inspirational, and the framing, positive or negative, of a security proposal. The interaction of these two constructs affects the executive's commitment to an information security proposal. The model is tested using a scenario-based experiment that elicited responses from business executives across 100+ organizations. Results show that the interaction of the negative framing of a proposal and the inspirational PSIA of an executive affects his or her commitment to information security. Further, negative framing of a proposal and the cost of the security solution interact to decrease the executive's commitment to information security. This study underscores that prescriptions for business executives from normative models in information security spending must be complemented with appropriately framed messages to account for the differences in executives' PSIA (rational and inspirational) and cognitive biases.

YSO-asiasanat: resurssit; kohdentaminen; tietoturva; päätöksenteko; heuristiikka; resursointi; kognitiiviset vinoumat

Vapaat asiasanat: resurssointi

Liittyvät organisaatiot

OKM-raportointi: Kyllä

Raportointivuosi: 2020

JUFO-taso: 1