Exploring the relationship between student mobile information security awareness and behavioural intent. (12th October 2015)

• Record Type: Journal Article
• Authors: Ngoqo, Bukelwa; Flowerday, Stephen V.
• Is Part Of: Information and computer security. Volume 23:Number 4(2015)
• Page Start: 406
• Page End: 420
• Publication Date: 2015-10-12
• Subjects: Computer security -- Management -- Periodicals; Computer networks -- Security measures -- Periodicals; Data protection -- Management -- Periodicals; 658.47
• DOI: 10.1108/ICS-10-2014-0072
• Languages: English
• ISSNs: 2056-4961

Abstract

<abstract> <title> <x content-type="archive" xml:space="preserve">Abstract</x> </title> <sec> <title content-type="abstract-heading">Purpose</title> <p> – The purpose of this paper was to analyse existing theories from the social sciences to gain a better understanding of factors which contribute to student mobile phone users' poor information security behaviour. Two key aspects associated with information security behaviour were considered, namely, awareness and behavioural intent. This paper proposes that the knowing-and-doing gap can possibly be reduced by addressing both awareness and behavioural intent. This research paper explores the relationship between student mobile phone user information security awareness and behavioural intent in a developmental university in South Africa. </p> </sec> <sec> <title content-type="abstract-heading">Design/methodology/approach</title> <p> – Information security awareness interventions were implemented in this action research study, and student information security behavioural intent was observed after each cycle. </p> </sec> <sec> <title content-type="abstract-heading">Findings</title> <p> – The poor security behaviour exhibited by student mobile phone users, which was confirmed by the findings of this study, is of particular interest in the university context, as most undergraduate students are offered a computer-related course which covers certain information security-related principles. Existing researchers in the field of information security still grapple with the "knowing-and-doing" gap, where user information security knowledge/awareness sometimes does not result in safer behavioural practises. </p> </sec> <sec> <title content-type="abstract-heading">Originality/value</title> <p> – Zhang <italic>et al.</italic> (2009) suggest that understanding human behaviour is important when dealing with the problems caused by human errors. Harnesk and Lindstrom (2011) expressed a concern that existing research does not address the interlinked relationship between anticipated security behaviour and the enactment of security procedures. This study acknowledges Choi <italic>et al.</italic> (2008) contribution in their discussions on the "knowing-and-doing gap" suggests a link between awareness and actual behaviour that is confirmed by the findings of this study.</p> </sec> </abstract>