In this study, we examine how to motivate computer users to protect themselves from potential security and privacy threats. We draw on the Information Processing framework which posits that threat mitigation commonly occurs before full cognitive threat assessment and we conduct an empirical study to evaluate the effects of an exposure to general information security threats on the strength of passwords and the disclosure of personal information. Through an online experiment, we compare immediate computer user reactions to potential non-individually specific security and privacy threats in an extra-organizational context. We find evidence consistent with automatic security and privacy protective actions in response to these threats. Computer users exposed to news stories about corporate security breaches limit the disclosure of sensitive personal information and choose stronger passwords. The study complements the existing behavior modification research in information security by providing the theoretical and empirical foundation for the exploration of automatic security and privacy threat mitigation strategies across different contexts. We explore factors that affect perceptions of privacy breach among mobile app users.We evaluate how the type of information and legal contracts affect perceptions of a privacy breach.We develop and operationalize a new construct: perceived privacy breach.We find that not all privacy breaches are alike.Legal contracts only partially reduce perceptions of a privacy breach.
The impact of information security threat awareness on privacy-protective behaviors
Published 2018 in Computers in Human Behavior
ABSTRACT
PUBLICATION RECORD
- Publication year
2018
- Venue
Computers in Human Behavior
- Publication date
2018-06-01
- Fields of study
Business, Computer Science, Psychology
- Identifiers
- External record
- Source metadata
Semantic Scholar
CITATION MAP
EXTRACTION MAP
CLAIMS
- No claims are published for this paper.
CONCEPTS
- No concepts are published for this paper.