Proactive Information Security Behavior: Group Culture and IT Governance Effects
Jenell L. S. Wittmer, Canchu Lin · Academy of Management Proceedings · 2019
As a point of departure from prior research that is primarily concerned with seeking effective organizational control over employees’ information security behavior, this study attempts to explore the potential in employees to positively contribute to organizational information security management. Toward that end, this study developed the concept of proactive information security behavior and examined its connections to individual creativity and two organizational context factors: group culture and decentralized IT governance. Reliability and validity of this construct were tested with survey data. Findings of this study supported its positive relationship with individual creativity and group culture and showed partial and full mediation effects of decentralized IT governance on the relationship between group culture and proactive information security behavior and those of proactive information security behavior on the relationship between group culture and individual creativity. Theoretical and practice implications are discussed.