Work ethic and information security behavior. (7th December 2021)

• Record Type: Journal Article
• Authors: Ramakrishnan, Thiagarajan; Hite, Dwight M.; Schuessler, Joseph H.; Prybutok, Victor
• Is Part Of: Information and computer security. Volume 30:Number 3(2022)
• Page Start: 364
• Page End: 381
• Publication Date: 2021-12-07
• Subjects: Information security -- Work ethic -- Employment screening -- Security posture; Computer security -- Management -- Periodicals; Computer networks -- Security measures -- Periodicals; Data protection -- Management -- Periodicals; 658.47
• DOI: 10.1108/ICS-02-2021-0017
• Languages: English
• ISSNs: 2056-4961

Abstract

Abstract : Purpose: Information security is a growing issue that impacts organizations in virtually all industries, and data breaches impact millions of customers and cost organizations millions of dollars. Within the past several years alone, huge data breaches have been experienced by organizations such as Marriot, Equifax, eBay, JP Morgan Chase, Home Depot, Target and Yahoo, the latter of which impacted three billion users. This study aims to examine the utilization of pre-employment screening to identify potential hires that may require enhanced information security training to avoid such costs. Design/methodology/approach: The authors hypothesize that an individual's work ethic predicts a person's information security behavior. The authors test this hypothesis using structural equation modeling with bootstrapping techniques. Findings: Data analysis suggests that certain dimensions of work ethic do indeed predict information security posture, and thus, simple pre-employment screening techniques (i.e. questionnaires) can aid in identifying potential security threats. Practical implications: The findings provide a tool for identifying problematic employee security posture prior to hiring, which may be useful in identifying training needs for new hires. Originality/value: The findings provide a tool for identifying problematic employee security posture prior to hiring, which may be useful in identifying training needs for new hires.