Examining the Relationship of Organizational Insiders' Psychological Capital with Information Security Threat and Coping Appraisals

Abstract

Practitioners and researchers alike recognize the positive influence insiders’ behavior can have on information systems (IS) security. This awareness has resulted in a research stream focused on the performance of protective behaviors. We contribute to this research stream by extending an oft-cited theory in the information security literature — protection motivation theory (PMT) — to include the relationship of insiders’ psychological capital (PsyCap) with the mechanisms of PMT.

PsyCap is a construct of role-breadth psychological capacities and resources embodying important workrelated motivational resources. Therefore, given the varied facets central to PMT, determining the relationship of PsyCap with each distinct PMT mechanism is an important contribution. Furthermore, prior research has established that individuals can develop their PsyCap. Consequently, considering the relationship of role-breadth PsyCap with the PMT mechanisms provides an important and malleable, motivational antecedent that complements PMT and is absent from most assessments of the contemporary PMT model. We find support for PsyCap’s relationship with the mechanisms of PMT and suggest opportunities to develop PsyCap in conjunction with other organizational security efforts. We present our findings, discuss their implications for research and practice, and highlight several opportunities for future research.

Keywords: Information Security, Psychological Capital (PsyCap), Protection Motivation Theory (PMT), Positive Psychology, Organizational Insiders