Empirical Analysis of Behavior on Information Security

Abstract:     
In this article, we raise some prohibited matters within the organizations from the viewpoint of information security measures, and investigate factors such as organizational attributes and individual attributes which impact the decision-making on complying with the rule. For the purpose, we designed the survey and conducted the survey entitled “Survey on Japanese workers’ awareness and behavior to information security measures” in March 2010. Then, by using the collected data and stepwise logit model as a statistical tool, we analyze the relationships. As a result, we found the features of respondents who took problematic behavior. For example, the individuals who had experience of some information security accidents, or who had low degrees of workplace satisfaction, tend to take problematic behavior. Next, as motivation behind the behaviors, individuals who assess to doing right moralistically low tend to take problematic behavior, too. Third, as psychological factor, degree of risk aversion (on insurance) and degree of risk perception influenced the problematic behavior. In addition, with regard to the organizational attributes, introducing power shift from ruling body to lower organization as incentive system for employee’s working would make individuals tend to take problematic behavior.

Number of Pages in PDF File: 17

Keywords: information security, empirical analysis, stepwise logit model Web-based survey

JEL Classification: C25, C81, M59

working papers series