A theory-based review of information security behavior in the organization and home context
Joseph Omidosu, Jacques Ophoff · 2016
The use of interconnected information and communication systems has broadened computer users' vulnerability to cyber-attacks. However, effective information security measures are dependent on users' willingness to apply available security technologies. Automation of security measures are often recommended, but not all security challenges can be solved in this way. In addition, users often bypass such measures through insecure behaviors. The purpose of this paper is to provide a systematic review of academic literature, analyzing existing research on information security behavior. The findings are synthesized to produce a theory-based perspective, indicating the dominant theoretical approaches used to date. It is found that limited research attention has been given to information security behavior in the home context. Our findings motivate for further research into information security beyond technical issues and the organizational context.