网络安全最终用户合规性：密码管理与更新合规性

IF 8.2 2区管理学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS

Information & Management Pub Date : 2024-11-14 DOI:10.1016/j.im.2024.104060

Pratim Milton Datta , Oliver Krancher

{"title":"网络安全最终用户合规性：密码管理与更新合规性","authors":"Pratim Milton Datta , Oliver Krancher","doi":"10.1016/j.im.2024.104060","DOIUrl":null,"url":null,"abstract":"<div><div>In today's world, organizations rely on cybersecurity end-user compliance as an essential practical parameter. Yet cybersecurity compliance remains a challenge, and failures are commonplace. But why? In addressing this question, we argue that ISP compliance is neither too monolithic nor too granular a construct but needs respecification. We empirically investigate cybersecurity antecedents leading to (i) user protection-centric password management and (ii) system protection-centric update compliance dimensions. The results of our survey of 241 users show differentiating behavioral strands intertwined across different types of compliance, highlighting a unique interplay of attitudes, knowledge, and social factors as antecedents to password and update compliance.</div></div>","PeriodicalId":56291,"journal":{"name":"Information & Management","volume":"61 8","pages":"Article 104060"},"PeriodicalIF":8.2000,"publicationDate":"2024-11-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Cybersecurity end-user compliance: Password management versus update compliance\",\"authors\":\"Pratim Milton Datta , Oliver Krancher\",\"doi\":\"10.1016/j.im.2024.104060\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div><div>In today's world, organizations rely on cybersecurity end-user compliance as an essential practical parameter. Yet cybersecurity compliance remains a challenge, and failures are commonplace. But why? In addressing this question, we argue that ISP compliance is neither too monolithic nor too granular a construct but needs respecification. We empirically investigate cybersecurity antecedents leading to (i) user protection-centric password management and (ii) system protection-centric update compliance dimensions. The results of our survey of 241 users show differentiating behavioral strands intertwined across different types of compliance, highlighting a unique interplay of attitudes, knowledge, and social factors as antecedents to password and update compliance.</div></div>\",\"PeriodicalId\":56291,\"journal\":{\"name\":\"Information & Management\",\"volume\":\"61 8\",\"pages\":\"Article 104060\"},\"PeriodicalIF\":8.2000,\"publicationDate\":\"2024-11-14\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Information & Management\",\"FirstCategoryId\":\"91\",\"ListUrlMain\":\"https://www.sciencedirect.com/science/article/pii/S0378720624001423\",\"RegionNum\":2,\"RegionCategory\":\"管理学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q1\",\"JCRName\":\"COMPUTER SCIENCE, INFORMATION SYSTEMS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Information & Management","FirstCategoryId":"91","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S0378720624001423","RegionNum":2,"RegionCategory":"管理学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}

引用次数: 0

摘要

当今世界，企业将网络安全最终用户合规性作为一项重要的实用参数。然而，网络安全合规仍是一项挑战，失败也是司空见惯。原因何在？针对这一问题，我们认为互联网服务提供商合规既不是一个过于单一也不是一个过于细化的概念，而是需要重新定义。我们对网络安全的前因后果进行了实证调查，从而得出：(i) 以用户保护为中心的密码管理；(ii) 以系统保护为中心的更新合规性。我们对 241 名用户进行的调查结果显示，不同类型的合规性之间存在着相互交织的行为差异，这凸显了作为密码和更新合规性前因的态度、知识和社会因素之间独特的相互作用。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

Cybersecurity end-user compliance: Password management versus update compliance

In today's world, organizations rely on cybersecurity end-user compliance as an essential practical parameter. Yet cybersecurity compliance remains a challenge, and failures are commonplace. But why? In addressing this question, we argue that ISP compliance is neither too monolithic nor too granular a construct but needs respecification. We empirically investigate cybersecurity antecedents leading to (i) user protection-centric password management and (ii) system protection-centric update compliance dimensions. The results of our survey of 241 users show differentiating behavioral strands intertwined across different types of compliance, highlighting a unique interplay of attitudes, knowledge, and social factors as antecedents to password and update compliance.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

Information & Management 工程技术-计算机：信息系统

CiteScore

17.90

自引率

6.10%

发文量

123

审稿时长

1 months

期刊介绍： Information & Management is a publication that caters to researchers in the field of information systems as well as managers, professionals, administrators, and senior executives involved in designing, implementing, and managing Information Systems Applications.