This review explores the problems Chief Information Security Officers (CISOs) and other
cyber professionals face when defending their organization against cyberattacks. Using a …

Extra-role security behaviors (ERSBs)–spontaneous security behaviors that are not
prescribed in organizational security policies–are seen as a useful addition to securing …

To stand out from the competition, companies collect massive amounts of personal
information, which they use to create memorable and personalized customer experiences …

Business researchers use experimental methods extensively due to their high internal
validity. However, controlled laboratory and crowdsourcing settings often introduce issues of …

Organisations implement a variety of knowledge mechanisms such as information security
education, training and awareness (SETA) programs and information security policies, to …

Determining how to design persuasive information security messages to increase
employees' engagement in protection-motivated behaviors is an important organizational …

A significant focus of behavioral security research has been on understanding employees'
motives for protecting sensitive assets. To date, theorizing efforts in this space have focused …

Regardless of what security professionals do to motivate personal users to adopt security
technologies volitionally, the end result seems to be the same—low adoption rates. To …

Many existing studies focus on the effect of external influence mechanisms (eg, deterrence)
impacting information security policy compliance (ISPC). This study explores the formation of …

Purpose A fear appeal is a communication tactic designed to scare people into adopting
desired behaviors (eg wash hands to avoid contracting COVID-19). While it is generally …