Title
Information system security policy noncompliance: the role of situation-specific ethical orientation
Abstract
Purpose: This study examines how neutralization strategies affect the efficacy of information system security policies. This paper proposes that neutralization strategies used to rationalize security policy noncompliance range across ethical orientations, extending from those helping the greatest number of people (ethics of care) to those damaging the fewest (ethics of justice). The results show how noncompliance differs between genders based on those ethical orientations.
Design/methodology/approach: A survey was used to measure information system security policy noncompliance intentions across six different hypothetical scenarios involving neutralization techniques used to justify noncompliance. Data was gathered from students at a mid-western, comprehensive university in the United States.
Findings: The empirical analysis suggests that gender does play a role in information system security policy noncompliance. However, its significance is dependent upon the underlying neutralization method used to justify noncompliance. The role of reward and punishment is contingent on the situation-specific ethical orientation (SSEO) which in turn is a combination of internal ethical positioning based on one's gender and external ethical reasoning based on neutralization technique.
Originality/value: This study extends ethical decision-making theory by examining how the use of punishments and rewards might be more effective in security policy compliance based upon gender. Importantly, the study emphasizes the interplay between ethics, gender and neutralization techniques, as different ethical perspectives appeal differently based on gender.
Department(s)
Information Technology and Cybersecurity
Document Type
Article
DOI
https://doi.org/10.1108/ITP-03-2019-0109
Keywords
Ethics, Gender, Punishments, Rewards, Security policy noncompliance, Situation-specific ethical orientation (SSEO)
Publication Date
1-1-2020
Recommended Citation
Bansal, Gaurav, Steven Muzatko, and Soo Il Shin. "Information system security policy noncompliance: the role of situation-specific ethical orientation." Information Technology & People (2020).
Journal Title
Information Technology and People
