“Information Security Is Not Really My Job”: Exploring Information Security Role Identity in End-Users

Ogbanufe, Obi
Journal Title
Journal ISSN
Volume Title
Given the significant role individuals play on the welfare of organizations’ security, end users are encouraged to see themselves as part of the information security solution and are expected to perform certain end-user security roles. However, there is often a divide between the organization’s expectations of the end-user’s information security role and the end-user’s functional role. We explore the concept of role identity in order to understand the factors that increase the importance ascribed to the information security end user role, which in turn affects performance and actions towards security behaviors. We develop a model that focuses on two issues: (1) factors that increase information security role identity (ISRI) and (2) consequents of ISRI, specific to security behaviors. A survey was used to explore the relationships in the model. Theoretical and practical implications of this research are presented.
Innovative Behavioral IS Security and Privacy Research, information security behaviors, information security role identity, normative expectations, perceived threat, role identity, social support
Access Rights
Email libraryada-l@lists.hawaii.edu if you need this content in ADA-compliant format.