{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,9]],"date-time":"2026-11-09T23:30:13Z","timestamp":1794267013260,"version":"4.9.0"},"reference-count":194,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2021,2,4]],"date-time":"2021-02-04T00:00:00Z","timestamp":1612396800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2021,2,4]],"date-time":"2021-02-04T00:00:00Z","timestamp":1612396800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Bus Psychol"],"published-print":{"date-parts":[[2022,2]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Cybersecurity is an ever-present problem for organizations, but organizational science has barely begun to enter the arena of cybersecurity research. As a result, the \u201chuman factor\u201d in cybersecurity research is much less studied than its technological counterpart. The current manuscript serves as an introduction and invitation to cybersecurity research by organizational scientists. We define cybersecurity, provide definitions of key cybersecurity constructs relevant to employee behavior, illuminate the unique opportunities available to organizational scientists in the cybersecurity arena (e.g., publication venues that reach new audiences, novel sources of external funding), and provide overall conceptual frameworks of the antecedents of employees\u2019 cybersecurity behavior. In so doing, we emphasize both end-users of cybersecurity in organizations and employees focused specifically on cybersecurity work. We provide an expansive agenda for future organizational science research on cybersecurity\u2014and we describe the benefits such research can provide not only to cybersecurity but also to basic research in organizational science itself. We end by providing a list of potential objections to the proposed research along with our responses to these objections. It is our hope that the current manuscript will catalyze research at the interface of organizational science and cybersecurity.<\/jats:p>","DOI":"10.1007\/s10869-021-09732-9","type":"journal-article","created":{"date-parts":[[2021,2,4]],"date-time":"2021-02-04T18:03:29Z","timestamp":1612461809000},"page":"1-29","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":83,"title":["Organizational science and cybersecurity: abundant opportunities for research at the interface"],"prefix":"10.1007","volume":"37","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4040-4686","authenticated-orcid":false,"given":"Reeshad S.","family":"Dalal","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1142-113X","authenticated-orcid":false,"given":"David J.","family":"Howard","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5430-8156","authenticated-orcid":false,"given":"Rebecca J.","family":"Bennett","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6704-0750","authenticated-orcid":false,"given":"Clay","family":"Posey","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8313-2206","authenticated-orcid":false,"given":"Stephen J.","family":"Zaccaro","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1400-2034","authenticated-orcid":false,"given":"Bradley J.","family":"Brummel","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,2,4]]},"reference":[{"issue":"6221","key":"9732_CR1","doi-asserted-by":"crossref","first-page":"509","DOI":"10.1126\/science.aaa1465","volume":"347","author":"A Acquisti","year":"2015","unstructured":"Acquisti, A., Brandimarte, L., & Loewenstein, G. (2015). Privacy and human behavior in the age of information. Science, 347(6221), 509\u2013514.","journal-title":"Science"},{"issue":"2","key":"9732_CR2","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1016\/0749-5978(91)90020-T","volume":"50","author":"I Ajzen","year":"1991","unstructured":"Ajzen, I. (1991). The theory of planned behavior. Organizational Behavior and Human Decision Processes, 50(2), 179\u2013211.","journal-title":"Organizational Behavior and Human Decision Processes"},{"key":"9732_CR3","volume-title":"Enterprise security risk management: Concepts and applications","author":"B Allen","year":"2017","unstructured":"Allen, B., & Loyear, R. (2017). Enterprise security risk management: Concepts and applications. Brookfield, CT: Rothstein Publishing."},{"issue":"3","key":"9732_CR4","doi-asserted-by":"crossref","first-page":"176","DOI":"10.1016\/j.orgdyn.2015.05.003","volume":"44","author":"GM Alliger","year":"2015","unstructured":"Alliger, G. M., Cerasoli, C. P., Tannenbaum, S. I., & Vessey, W. B. (2015). Team resilience: How teams flourish under pressure. Organizational Dynamics, 44(3), 176\u2013184.","journal-title":"Organizational Dynamics"},{"key":"9732_CR5","unstructured":"Al-Daeef, M. M., Basir, N., & Saudi, M. M. (2017, July). Security awareness training: A review. In Proceedings of the World Congress on Engineering (Vol. 1, pp. 5-7). London, UK. https:\/\/pdfs.semanticscholar.org\/f040\/209717c34624dcb97ccd3ca8acc2e0d8ed93.pdf"},{"key":"9732_CR6","doi-asserted-by":"crossref","unstructured":"Al-Ubaydli, O., List, J. A., & Suskind, D. (2019). The science of using science: Towards an understanding of the threats to scaling experiments. NBER Working Paper No. 25848. https:\/\/pdfs.semanticscholar.org\/c586\/ecc2d2a3678774ef66763abda0b6f2d1063c.pdf","DOI":"10.3386\/w25848"},{"key":"9732_CR7","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1016\/j.dss.2016.09.010","volume":"92","author":"BB Anderson","year":"2016","unstructured":"Anderson, B. B., Jenkins, J. L., Vance, A., Kirwan, C. B., & Eargle, D. (2016). Your memory is working against you: How eye tracking and memory explain habituation to security warnings. Decision Support Systems, 92, 3\u201313.","journal-title":"Decision Support Systems"},{"issue":"1","key":"9732_CR8","doi-asserted-by":"crossref","first-page":"58","DOI":"10.1016\/0749-5978(89)90058-7","volume":"43","author":"L Argote","year":"1989","unstructured":"Argote, L., Turner, M. E., & Fichman, M. (1989). To centralize or not to centralize: The effects of uncertainty and threat on group structure and performance. Organizational Behavior and Human Decision Processes, 43(1), 58\u201374.","journal-title":"Organizational Behavior and Human Decision Processes"},{"key":"9732_CR9","doi-asserted-by":"crossref","first-page":"218","DOI":"10.1016\/j.cose.2017.02.006","volume":"66","author":"S Aurigemma","year":"2017","unstructured":"Aurigemma, S., & Mattson, T. (2017). Privilege or procedure: Evaluating the effect of employee status on intent to comply with socially interactive information security threats and controls. Computers & Security, 66, 218\u2013234.","journal-title":"Computers & Security"},{"issue":"6","key":"9732_CR10","doi-asserted-by":"crossref","first-page":"836","DOI":"10.1037\/0021-9010.77.6.836","volume":"77","author":"JT Austin","year":"1992","unstructured":"Austin, J. T., & Villanova, P. (1992). The criterion problem: 1917\u20131992. Journal of Applied Psychology, 77(6), 836\u2013874.","journal-title":"Journal of Applied Psychology"},{"issue":"1","key":"9732_CR11","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1111\/j.1744-6570.1991.tb00688.x","volume":"44","author":"MR Barrick","year":"1991","unstructured":"Barrick, M. R., & Mount, M. K. (1991). The big five personality dimensions and job performance: A meta-analysis. Personnel Psychology, 44(1), 1\u201326.","journal-title":"Personnel Psychology"},{"key":"9732_CR12","unstructured":"Barros, A. (2018). Is your SOC your CSIRT? Gartner. https:\/\/blogs.gartner.com\/augusto-barros\/2018\/06\/27\/is-your-soc-your-csirt"},{"issue":"3","key":"9732_CR13","doi-asserted-by":"crossref","first-page":"183","DOI":"10.1037\/h0024835","volume":"74","author":"DJ Bem","year":"1967","unstructured":"Bem, D. J. (1967). Self-perception: An alternative interpretation of cognitive dissonance phenomena. Psychological Review, 74(3), 183\u2013200.","journal-title":"Psychological Review"},{"key":"9732_CR14","doi-asserted-by":"crossref","first-page":"301","DOI":"10.1086\/449245","volume":"20","author":"TJ Bernard","year":"1996","unstructured":"Bernard, T. J., & Snipes, J. B. (1996). Theoretical integration in criminology. Crime and Justice, 20, 301\u2013348.","journal-title":"Crime and Justice"},{"issue":"1","key":"9732_CR15","doi-asserted-by":"crossref","first-page":"217","DOI":"10.5465\/annals.2014.0076","volume":"11","author":"ES Bernstein","year":"2017","unstructured":"Bernstein, E. S. (2017). Making transparency transparent: The evolution of observation in management theory. Academy of Management Annals, 11(1), 217\u2013266.","journal-title":"Academy of Management Annals"},{"issue":"3","key":"9732_CR16","doi-asserted-by":"crossref","first-page":"605","DOI":"10.1111\/peps.12046","volume":"67","author":"DP Bhave","year":"2014","unstructured":"Bhave, D. P. (2014). The invisible eye? Electronic performance monitoring and employee job performance. Personnel Psychology, 67(3), 605\u2013635.","journal-title":"Personnel Psychology"},{"issue":"1","key":"9732_CR17","doi-asserted-by":"crossref","first-page":"127","DOI":"10.1177\/0149206319878254","volume":"46","author":"DP Bhave","year":"2020","unstructured":"Bhave, D. P., Teo, L. H., & Dalal, R. S. (2020). Privacy at work: A review and a research agenda for a contested terrain. Journal of Management, 46(1), 127\u2013164.","journal-title":"Journal of Management"},{"issue":"5","key":"9732_CR18","doi-asserted-by":"crossref","first-page":"80","DOI":"10.1109\/MSP.2013.110","volume":"11","author":"J Blythe","year":"2013","unstructured":"Blythe, J., Koppel, R., & Smith, S. W. (2013). Circumvention of security: Good users do bad things. IEEE Security & Privacy, 11(5), 80\u201383.","journal-title":"IEEE Security & Privacy"},{"issue":"2","key":"9732_CR19","doi-asserted-by":"crossref","first-page":"332","DOI":"10.1037\/a0034745","volume":"99","author":"ME Brooks","year":"2014","unstructured":"Brooks, M. E., Dalal, D. K., & Nolan, K. P. (2014). Are common language effect sizes easier to understand than traditional effect sizes? Journal of Applied Psychology, 99(2), 332\u2013340.","journal-title":"Journal of Applied Psychology"},{"key":"9732_CR20","doi-asserted-by":"crossref","unstructured":"Brzowski, M., & Nathan-Roberts, D. (2019, November). Trust measurement in human\u2013automation interaction: A systematic review. In Proceedings of the Human Factors and Ergonomics Society Annual Meeting (Vol. 63, no. 1, pp. 1595-1599). SAGE CA: Los Angeles, CA: SAGE publications.","DOI":"10.1177\/1071181319631462"},{"key":"9732_CR21","doi-asserted-by":"publisher","unstructured":"Burns, A., Posey, C., & Roberts, T. L. (2019). Insiders\u2019 adaptations to security-based demands in the workplace: An examination of security behavioral complexity. Information Systems Frontiers. https:\/\/doi.org\/10.1007\/s10796-019-09951-9.","DOI":"10.1007\/s10796-019-09951-9"},{"issue":"6","key":"9732_CR22","doi-asserted-by":"crossref","first-page":"1187","DOI":"10.1111\/deci.12304","volume":"49","author":"A Burns","year":"2018","unstructured":"Burns, A., Roberts, T. L., Posey, C., Bennett, R. J., & Courtney, J. F. (2018). Intentions to comply versus intentions to protect: A vie theory approach to understanding the influence of insiders\u2019 awareness of organizational seta efforts. Decision Sciences, 49(6), 1187\u20131228.","journal-title":"Decision Sciences"},{"key":"9732_CR23","series-title":"CMU\/SEI-2013-TN-028","volume-title":"Advancing cybersecurity capability measurement using the CERT (registered trademark) - RMM maturity Indicator Lead scale (no","author":"MJ Butkovic","year":"2013","unstructured":"Butkovic, M. J., & Caralli, R. A. (2013). Advancing cybersecurity capability measurement using the CERT (registered trademark) - RMM maturity Indicator Lead scale (no, CMU\/SEI-2013-TN-028. Pittsburgh, PA: Carnegie-Mellon University Software Engineering Institute."},{"key":"9732_CR24","doi-asserted-by":"crossref","first-page":"597","DOI":"10.1037\/12169-019","volume-title":"(2011). APA handbook of industrial and organizational psychology, Vol 1: Building and developing the organization","author":"JA Cannon-Bowers","year":"2011","unstructured":"Cannon-Bowers, J. A., & Bowers, C. (2011). Team development and functioning. In S. Zedeck (Ed.), (2011). APA handbook of industrial and organizational psychology, Vol 1: Building and developing the organization (pp. 597\u2013650). Washington, DC, US: American Psychological Association."},{"issue":"1","key":"9732_CR25","doi-asserted-by":"crossref","first-page":"84","DOI":"10.1037\/0021-9010.83.1.84","volume":"83","author":"KP Carson","year":"1998","unstructured":"Carson, K. P., Becker, J. S., & Henderson, J. A. (1998). Is utility really futile? A failure to replicate and an extension. Journal of Applied Psychology, 83(1), 84\u201396.","journal-title":"Journal of Applied Psychology"},{"issue":"3","key":"9732_CR26","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1080\/15536548.2005.10855772","volume":"1","author":"M Chan","year":"2005","unstructured":"Chan, M., Woon, I., & Kankanhalli, A. (2005). Perceptions of information security in the workplace: Linking information security climate to compliant behavior. Journal of Information Privacy and Security, 1(3), 18\u201341.","journal-title":"Journal of Information Privacy and Security"},{"key":"9732_CR27","unstructured":"Checklist Incident Priority. (n.d.). IT Process Maps. http:\/\/wiki.en.it-processmaps.com\/index.php\/Checklist_Incident_Priority"},{"key":"9732_CR28","doi-asserted-by":"crossref","unstructured":"Chickowski, E. (2019, September 2). Every hour SOCs run, 15 minutes are wasted on false positives. https:\/\/securityboulevard.com\/2019\/09\/every-hour-socs-run-15-minutes-are-wasted-on-false-positives\/","DOI":"10.4236\/ojgen.2019.91002"},{"issue":"5","key":"9732_CR29","doi-asserted-by":"crossref","first-page":"1103","DOI":"10.1037\/a0016172","volume":"94","author":"MS Christian","year":"2009","unstructured":"Christian, M. S., Bradley, J. C., Wallace, J. C., & Burke, M. J. (2009). Workplace safety: A meta-analysis of the roles of person and situation factors. Journal of Applied Psychology, 94(5), 1103\u20131127.","journal-title":"Journal of Applied Psychology"},{"key":"9732_CR30","doi-asserted-by":"crossref","unstructured":"Cichonski, P., Millar, T., Grance, T., & Scarfone, K. (2012). Computer security incident handling guide: Recommendations of the National Institute of Standards and Technology. National Institute of Standards and Technology Special Publication 800-61 Revision 2. http:\/\/nvlpubs.nist.gov\/nistpubs\/SpecialPublications\/NIST.SP.800-61r2.pdf","DOI":"10.6028\/NIST.SP.800-61r2"},{"key":"9732_CR31","unstructured":"Cobb, S. (2018, May 21). Cybersecurity training still neglected by many employers. welivesecurity. https:\/\/www.welivesecurity.com\/2018\/05\/21\/cybersecurity-training-still-neglected\/"},{"key":"9732_CR32","unstructured":"Costa, D. L., Albrethsen, M. J., Collins, M. L., Perl, S. J., Silowash, G. J., & Spooner, D. L. (2016). An insider threat indicator ontology. https:\/\/resources.sei.cmu.edu\/asset_files\/TechnicalReport\/2016_005_001_454627.pdf"},{"issue":"5","key":"9732_CR33","doi-asserted-by":"crossref","first-page":"1849","DOI":"10.1016\/j.chb.2012.05.003","volume":"28","author":"J Cox","year":"2012","unstructured":"Cox, J. (2012). Information systems user security: A structured model of the knowing\u2013doing gap. Computers in Human Behavior, 28(5), 1849\u20131858.","journal-title":"Computers in Human Behavior"},{"issue":"2","key":"9732_CR34","doi-asserted-by":"crossref","first-page":"525","DOI":"10.25300\/MISQ\/2019\/15117","volume":"43","author":"WA Cram","year":"2019","unstructured":"Cram, W. A., D'Arcy, J., & Proudfoot, J. G. (2019). Seeing the forest and the trees: A meta-analysis of the antecedents to information security policy compliance. MIS Quarterly, 43(2), 525\u2013554.","journal-title":"MIS Quarterly"},{"key":"9732_CR35","unstructured":"CriticalStart. (2019). The impact of security alert overload. https:\/\/www.criticalstart.com\/wp-content\/uploads\/CS_MDR_Survey_Report.pdf"},{"key":"9732_CR36","doi-asserted-by":"crossref","first-page":"90","DOI":"10.1016\/j.cose.2012.09.010","volume":"32","author":"RE Crossler","year":"2013","unstructured":"Crossler, R. E., Johnston, A. C., Lowry, P. B., Hu, Q., Warkentin, M., & Baskerville, R. (2013). Future directions for behavioral information security research. Computers & Security, 32, 90\u2013101.","journal-title":"Computers & Security"},{"key":"9732_CR37","unstructured":"Cybersecurity glossary. (n.d.). Cybrary. https:\/\/www.cybrary.it\/glossary"},{"issue":"6","key":"9732_CR38","doi-asserted-by":"crossref","first-page":"1241","DOI":"10.1037\/0021-9010.90.6.1241","volume":"90","author":"RS Dalal","year":"2005","unstructured":"Dalal, R. S. (2005). A meta-analysis of the relationship between organizational citizenship behavior and counterproductive work behavior. Journal of Applied Psychology, 90(6), 1241\u20131255.","journal-title":"Journal of Applied Psychology"},{"key":"9732_CR39","first-page":"104","volume-title":"Psychosocial dynamics of cyber security","author":"RS Dalal","year":"2016","unstructured":"Dalal, R. S., Bolunmez, B., Tomassetti, A. J., & Sheng, Z. (2016). Escalation: An understudied team decision-making structure. In S. J. Zaccaro, R. S. Dalal, L. E. Tetrick, & J. A. Steinke (Eds.), Psychosocial dynamics of cyber security (pp. 104\u2013121). New York, NY: Routledge."},{"key":"9732_CR40","series-title":"Test theory and testing and assessment in industrial and organizational psychology","first-page":"675","volume-title":"American Psychological Association handbook of testing and assessment in psychology","author":"RS Dalal","year":"2013","unstructured":"Dalal, R. S., & Cred\u00e9, M. (2013). Job satisfaction. In K. F. Geisinger (Ed.), American Psychological Association handbook of testing and assessment in psychology, Test theory and testing and assessment in industrial and organizational psychology (Vol. 1, pp. 675\u2013691). Washington, D.C.: American Psychological Association."},{"key":"9732_CR41","first-page":"92","volume-title":"Psychosocial dynamics of cyber security","author":"RS Dalal","year":"2016","unstructured":"Dalal, R. S., & Gorab, A. K. (2016). Insider threat in cyber security: What the organizational psychology literature on counterproductive work behavior can and cannot (yet) tell us. In S. J. Zaccaro, R. S. Dalal, L. E. Tetrick, & J. A. Steinke (Eds.), Psychosocial dynamics of cyber security (pp. 92\u2013110). New York, NY: Routledge."},{"issue":"2","key":"9732_CR42","doi-asserted-by":"crossref","first-page":"285","DOI":"10.2753\/MIS0742-1222310210","volume":"31","author":"J D'Arcy","year":"2014","unstructured":"D'Arcy, J., Herath, T., & Shoss, M. K. (2014). Understanding employee responses to stressful information security requirements: A coping perspective. Journal of Management Information Systems, 31(2), 285\u2013318.","journal-title":"Journal of Management Information Systems"},{"issue":"1","key":"9732_CR43","doi-asserted-by":"crossref","first-page":"79","DOI":"10.1287\/isre.1070.0160","volume":"20","author":"J D'Arcy","year":"2009","unstructured":"D'Arcy, J., Hovav, A., & Galletta, D. (2009). User awareness of security countermeasures and its impact on information systems misuse: A deterrence approach. Information Systems Research, 20(1), 79\u201398.","journal-title":"Information Systems Research"},{"key":"9732_CR44","doi-asserted-by":"crossref","unstructured":"Darwish, A., El Zarka, A., & Aloul, F. (2012, December). Towards understanding phishing victims' profile. In 2012 International Conference on Computer Systems and Industrial Informatics (pp. 1-5). IEEE. https:\/\/www.researchgate.net\/profile\/Fadi_Aloul\/publication\/261384277_Towards_understanding_phishing_victims'_profile\/links\/0deec53a48323b308d000000.pdf","DOI":"10.1109\/ICCSII.2012.6454454"},{"issue":"3","key":"9732_CR45","doi-asserted-by":"crossref","first-page":"319","DOI":"10.2307\/249008","volume":"13","author":"FD Davis","year":"1989","unstructured":"Davis, F. D. (1989). Perceived usefulness, perceived ease of use, and user acceptance of information technology. MIS Quarterly, 13(3), 319\u2013340.","journal-title":"MIS Quarterly"},{"issue":"1","key":"9732_CR46","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1037\/a0038088","volume":"141","author":"IN Defoe","year":"2015","unstructured":"Defoe, I. N., Dubas, J. S., Figner, B., & Van Aken, M. A. (2015). A meta-analysis on age differences in risky decision making: Adolescents versus children and adults. Psychological Bulletin, 141(1), 48\u201384.","journal-title":"Psychological Bulletin"},{"key":"9732_CR47","unstructured":"Dehoyos, M. (2019). Common problems and limitations of cyber security awareness training. CPO Magazine. https:\/\/www.cpomagazine.com\/cyber-security\/common-problems-and-limitations-of-cyber-security-awareness-training\/"},{"key":"9732_CR48","unstructured":"Deloitte. (2018). Positive technology: Designing work environments for digital well-being. https:\/\/www2.deloitte.com\/us\/en\/insights\/focus\/behavioral-economics\/negative-impact-technology-business.html#endnote-sup-2"},{"key":"9732_CR49","doi-asserted-by":"crossref","unstructured":"Dennis, A. R., & Minas, R. K. (2018). Security on autopilot: Why current security theories hijack our thinking and lead us astray. ACM SIGMIS Database: The DATABASE for Advances in Information Systems, 49(SI), 15-38.","DOI":"10.1145\/3210530.3210533"},{"issue":"1","key":"9732_CR50","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1080\/01611194.2019.1623343","volume":"44","author":"A Diaz","year":"2020","unstructured":"Diaz, A., Sherman, A. T., & Joshi, A. (2020). Phishing in an academic community: A study of user susceptibility and behavior. Cryptologia, 44(1), 53\u201367.","journal-title":"Cryptologia"},{"issue":"2","key":"9732_CR51","doi-asserted-by":"crossref","first-page":"346","DOI":"10.1017\/iop.2018.3","volume":"11","author":"RC Dreibelbis","year":"2018","unstructured":"Dreibelbis, R. C., Martin, J., Coovert, M. D., & Dorsey, D. W. (2018). The looming cybersecurity crisis and what it means for the practice of industrial and organizational psychology. Industrial and Organizational Psychology, 11(2), 346\u2013365.","journal-title":"Industrial and Organizational Psychology"},{"key":"9732_CR52","unstructured":"Dreyfuss, E. (2018, August 17). A bot panic hits Amazon's Mechanical Turk. https:\/\/www.wired.com\/story\/amazon-mechanical-turk-bot-panic\/"},{"issue":"4","key":"9732_CR53","doi-asserted-by":"crossref","first-page":"343","DOI":"10.1037\/h0023535","volume":"21","author":"MD Dunnette","year":"1966","unstructured":"Dunnette, M. D. (1966). Fads, fashions, and folderol in psychology. American Psychologist, 21(4), 343\u2013352.","journal-title":"American Psychologist"},{"key":"9732_CR54","unstructured":"Faklaris, C., Dabbish, L. A., & Hong, J. I. (2019). A self-report measure of end-user security attitudes (SA-6). In Fifteenth Symposium on Usable Privacy and Security (SOUPS 2019)."},{"issue":"2","key":"9732_CR55","doi-asserted-by":"crossref","first-page":"203","DOI":"10.1037\/h0041593","volume":"58","author":"L Festinger","year":"1959","unstructured":"Festinger, L., & Carlsmith, J. M. (1959). Cognitive consequences of forced compliance. Journal of Abnormal and Social Psychology, 58(2), 203\u2013210.","journal-title":"Journal of Abnormal and Social Psychology"},{"key":"9732_CR56","doi-asserted-by":"crossref","unstructured":"Fisher, D. (2015). Millennial generation as an insider threat: High risk or overhyped? Naval Postgraduate School, Monterey, CA: Unpublished Thesis.","DOI":"10.21236\/AD1008928"},{"key":"9732_CR57","doi-asserted-by":"crossref","first-page":"90","DOI":"10.1016\/j.cose.2014.03.004","volume":"43","author":"WR Flores","year":"2014","unstructured":"Flores, W. R., Antonsen, E., & Ekstedt, M. (2014). Information security knowledge sharing in organizations: Investigating the effect of behavioral information security governance and national culture. Computers & Security, 43, 90\u2013110.","journal-title":"Computers & Security"},{"key":"9732_CR58","unstructured":"Fortin, J. (2019, May). 16. The New York Times. http:\/\/: Chelsea Manning ordered back to jail for refusal to testify in WikiLeaks inquiry. https:\/\/www.nytimes.com\/2019\/05\/16\/us\/chelsea-manning-jail.html."},{"key":"9732_CR59","unstructured":"Frankenfield, J. (2020, May). 8. Investopedia: Zero-day attack https:\/\/www.investopedia.com\/terms\/z\/zero-day-attack.asp."},{"issue":"2","key":"9732_CR60","doi-asserted-by":"crossref","first-page":"223","DOI":"10.1108\/SCM-10-2018-0357","volume":"25","author":"A Ghadge","year":"2020","unstructured":"Ghadge, A., Wei\u03b2, M., Caldwell, N. D., & Wilding, R. (2020). Managing cyber risk in supply chains: A review and research agenda. Supply Chain Management: An International Journal, 25(2), 223\u2013240.","journal-title":"Supply Chain Management: An International Journal"},{"issue":"3","key":"9732_CR61","doi-asserted-by":"crossref","first-page":"613","DOI":"10.2307\/256117","volume":"28","author":"D Gladstein","year":"1985","unstructured":"Gladstein, D., & Reilly, N. (1985). Group decision making under threat: The tycoon game. Academy of Management Journal, 28(3), 613\u2013627.","journal-title":"Academy of Management Journal"},{"issue":"6","key":"9732_CR62","doi-asserted-by":"crossref","first-page":"1222","DOI":"10.1037\/a0037547","volume":"99","author":"E Gonzalez-Mul\u00e9","year":"2014","unstructured":"Gonzalez-Mul\u00e9, E., Mount, M. K., & Oh, I. S. (2014). A meta-analysis of the relationship between general mental ability and nontask performance. Journal of Applied Psychology, 99(6), 1222\u20131243.","journal-title":"Journal of Applied Psychology"},{"key":"9732_CR63","doi-asserted-by":"crossref","first-page":"345","DOI":"10.1016\/j.cose.2017.11.015","volume":"73","author":"M Gratian","year":"2018","unstructured":"Gratian, M., Bandi, S., Cukier, M., Dykstra, J., & Ginther, A. (2018). Correlating human traits and cyber security behavior intentions. Computers & Security, 73, 345\u2013358.","journal-title":"Computers & Security"},{"key":"9732_CR64","unstructured":"Greenberg, A. (2018, August 22). The untold story of NotPetya, the most devastating cyberattack in history. https:\/\/www.wired.com\/story\/notpetya-cyberattack-ukraine-russia-code-crashed-the-world\/"},{"issue":"5","key":"9732_CR65","doi-asserted-by":"crossref","first-page":"419","DOI":"10.1037\/h0029810","volume":"77","author":"PM Groves","year":"1970","unstructured":"Groves, P. M., & Thompson, R. F. (1970). Habituation: A dual-process theory. Psychological Review, 77(5), 419\u2013450.","journal-title":"Psychological Review"},{"issue":"2","key":"9732_CR66","doi-asserted-by":"crossref","first-page":"250","DOI":"10.1016\/0030-5073(76)90016-7","volume":"16","author":"RJ Hackman","year":"1976","unstructured":"Hackman, R. J., & Oldham, G. (1976). Motivation through the design of work: Test of a theory. Organizational Behavior and Human Performance, 16(2), 250\u2013279.","journal-title":"Organizational Behavior and Human Performance"},{"issue":"7","key":"9732_CR67","doi-asserted-by":"crossref","DOI":"10.1016\/j.heliyon.2017.e00346","volume":"3","author":"L Hadlington","year":"2017","unstructured":"Hadlington, L. (2017). Human factors in cybersecurity: Examining the link between internet addiction, impulsivity, attitudes towards cybersecurity, and risky cybersecurity behaviours. Heliyon, 3(7), e00346.","journal-title":"Heliyon"},{"key":"9732_CR68","series-title":"In Proceedings of the 22nd International Conference on World Wide Web (pp. 737\u2013744)","volume-title":"A pilot study of cyber security and privacy related behavior and personality traits","author":"T Halevi","year":"2013","unstructured":"Halevi, T., Lewis, J., & Memon, N. (2013). A pilot study of cyber security and privacy related behavior and personality traits, In Proceedings of the 22nd International Conference on World Wide Web (pp. 737\u2013744). Rio de Janeiro: Brazil."},{"issue":"1","key":"9732_CR69","doi-asserted-by":"crossref","first-page":"96","DOI":"10.2307\/256901","volume":"41","author":"DA Harrison","year":"1998","unstructured":"Harrison, D. A., Price, K. H., & Bell, M. P. (1998). Beyond relational demography: Time and the effects of surface- and deep-level diversity on work group cohesion. Academy of Management Journal, 41(1), 96\u2013107.","journal-title":"Academy of Management Journal"},{"key":"9732_CR70","doi-asserted-by":"crossref","unstructured":"Harrison, D. A, Price, K. H., Gavin, J. H., & Florey, A. T. (2002). Time, teams, and task performance: Changing effects of surface and deep-level diversity on group functioning. Academy of Management Journal, 45(5), 1029\u20131045.","DOI":"10.5465\/3069328"},{"key":"9732_CR71","unstructured":"Harsch, S. (2019, Nov.). 4. RSA: Operationalizing incident response https:\/\/www.rsa.com\/en-us\/blog\/2019-11\/operationalizing-incident-response."},{"key":"9732_CR72","volume-title":"Preliminary considerations: On national cyber security. National Cyber Security Framework Manual","author":"M Hathaway","year":"2012","unstructured":"Hathaway, M., & Klimburg, A. (2012). Preliminary considerations: On national cyber security. National Cyber Security Framework Manual. Tallinn: NATO Cooperative Cyber Defence Centre of Excellence."},{"issue":"2","key":"9732_CR73","doi-asserted-by":"crossref","first-page":"106","DOI":"10.1057\/ejis.2009.6","volume":"18","author":"T Herath","year":"2009","unstructured":"Herath, T., & Rao, H. R. (2009). Protection motivation and deterrence: A framework for security policy compliance in organisations. European Journal of Information Systems, 18(2), 106\u2013125.","journal-title":"European Journal of Information Systems"},{"key":"9732_CR74","unstructured":"Howard, D. J. (2018). Development of the cybersecurity attitudes scale and modeling cybersecurity behavior and its antecedents. [unpublished master\u2019s thesis]. University of South Florida. https:\/\/scholarcommons.usf.edu\/cgi\/viewcontent.cgi?article=8503&context=etd"},{"key":"9732_CR75","unstructured":"Huntley, S. (2020, April 22). Findings on COVID-19 and online security threats. https:\/\/blog.google\/threat-analysis-group\/findings-covid-19-and-online-security-threats\/"},{"key":"9732_CR76","first-page":"80","volume-title":"Leading issues in information warfare and security research","author":"EM Hutchins","year":"2011","unstructured":"Hutchins, E. M., Cloppert, M. J., & Amin, R. M. (2011). Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains. In J. Ryan (Ed.), Leading issues in information warfare and security research (pp. 80\u2013106). Reading, U.K.: Academic Publishing International."},{"issue":"1","key":"9732_CR77","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1016\/j.im.2013.10.001","volume":"51","author":"P Ifinedo","year":"2014","unstructured":"Ifinedo, P. (2014). Information systems security policy compliance: An empirical study of the effects of socialisation, influence, and cognition. Information & Management, 51(1), 69\u201379.","journal-title":"Information & Management"},{"issue":"4","key":"9732_CR78","doi-asserted-by":"crossref","first-page":"68","DOI":"10.1145\/1104004.1104010","volume":"36","author":"GP Im","year":"2005","unstructured":"Im, G. P., & Baskerville, R. L. (2005). A longitudinal study of information system threat categories: The enduring problem of human error. ACM SIGMIS Database: The DATABASE for Advances in Information Systems, 36(4), 68\u201379.","journal-title":"ACM SIGMIS Database: The DATABASE for Advances in Information Systems"},{"key":"9732_CR79","unstructured":"ISO\/IEC. (2018) ISO\/IEC 27000:2018(en). https:\/\/www.iso.org\/obp\/ui\/#iso:std:iso-iec:27000:ed-5:v1:en"},{"issue":"4","key":"9732_CR80","doi-asserted-by":"crossref","first-page":"880","DOI":"10.1287\/isre.2016.0644","volume":"27","author":"JL Jenkins","year":"2016","unstructured":"Jenkins, J. L., Anderson, B. B., Vance, A., Kirwan, C. B., & Eargle, D. (2016). More harm than good? How messages that interrupt can make us vulnerable. Information Systems Research, 27(4), 880\u2013896.","journal-title":"Information Systems Research"},{"issue":"2","key":"9732_CR81","doi-asserted-by":"crossref","first-page":"597","DOI":"10.1080\/07421222.2017.1334499","volume":"34","author":"ML Jensen","year":"2017","unstructured":"Jensen, M. L., Dinger, M., Wright, R. T., & Thatcher, J. B. (2017). Training to mitigate phishing attacks using mindfulness techniques. Journal of Management Information Systems, 34(2), 597\u2013626.","journal-title":"Journal of Management Information Systems"},{"key":"9732_CR82","unstructured":"Johnson, A. M. (2005). The technology acceptance model and the decision to invest in information security. In Southern Association of Information Systems Conference (pp. 114-118)."},{"key":"9732_CR83","volume-title":"Computer incident response and forensics team management: Conducting a successful incident response","author":"L Johnson","year":"2014","unstructured":"Johnson, L. (2014). Computer incident response and forensics team management: Conducting a successful incident response. Waltham, MA: Syngress\/Elsevier."},{"issue":"1","key":"9732_CR84","first-page":"9","volume":"11","author":"CM Jones","year":"2010","unstructured":"Jones, C. M., McCarthy, R. V., Halawi, L., & Mujtaba, B. (2010). Utilizing the technology acceptance model to assess the employee adoption of information systems security measures. Issues in Information Systems, 11(1), 9\u201316.","journal-title":"Issues in Information Systems"},{"key":"9732_CR85","doi-asserted-by":"crossref","first-page":"341","DOI":"10.1146\/annurev-psych-120710-100511","volume":"63","author":"TA Judge","year":"2012","unstructured":"Judge, T. A., & Kammeyer-Mueller, J. D. (2012). Job attitudes. Annual Review of Psychology, 63, 341\u2013367.","journal-title":"Annual Review of Psychology"},{"issue":"3","key":"9732_CR86","doi-asserted-by":"crossref","first-page":"376","DOI":"10.1037\/0033-2909.127.3.376","volume":"127","author":"TA Judge","year":"2001","unstructured":"Judge, T. A., Thoresen, C. J., Bono, J. E., & Patton, G. K. (2001). The job satisfaction\u2013job performance relationship: A qualitative and quantitative review. Psychological Bulletin, 127(3), 376\u2013407.","journal-title":"Psychological Bulletin"},{"key":"9732_CR87","volume-title":"Thinking, fast and slow","author":"D Kahneman","year":"2011","unstructured":"Kahneman, D. (2011). Thinking, fast and slow. New York, NY: Farrar, Straus, and Giroux."},{"key":"9732_CR88","doi-asserted-by":"crossref","unstructured":"Kashdan, T. B., Disabato, D. J., Goodman, F. R., & McKnight, P. E. (2020). The five-dimensional curiosity scale revised (5DCR): Briefer subscales while separating overt and covert social curiosity. In press at Personality and Individual Differences.","DOI":"10.31219\/osf.io\/pu8f3"},{"issue":"1","key":"9732_CR89","doi-asserted-by":"crossref","first-page":"461","DOI":"10.1177\/1460458219832048","volume":"26","author":"SR Kessler","year":"2019","unstructured":"Kessler, S. R., Pindek, S., Kleinman, G., Andel, S. A., & Spector, P. E. (2019). Information security climate and the assessment of information security risk among healthcare employees. Health Informatics Journal, 26(1), 461\u2013473.","journal-title":"Health Informatics Journal"},{"issue":"2","key":"9732_CR90","doi-asserted-by":"crossref","first-page":"350","DOI":"10.1109\/JSYST.2014.2322503","volume":"9","author":"SK Khaitan","year":"2014","unstructured":"Khaitan, S. K., & McCalley, J. D. (2014). Design techniques and applications of cyberphysical systems: A survey. IEEE Systems Journal, 9(2), 350\u2013365.","journal-title":"IEEE Systems Journal"},{"key":"9732_CR91","doi-asserted-by":"crossref","unstructured":"Killcrece, G., Kossakowski, K.-P., Ruefle, R., & Zajicek, M. (2003). State of the practice of computer security incident response teams (CSIRTs). Carnegie Mellon University Software Engineering Institute technical report https:\/\/resources.sei.cmu.edu\/asset_files\/TechnicalReport\/2003_005_001_14204.pdf.","DOI":"10.21236\/ADA421664"},{"key":"9732_CR92","doi-asserted-by":"crossref","first-page":"39","DOI":"10.3389\/fpsyg.2018.00039","volume":"9","author":"ZM King","year":"2018","unstructured":"King, Z. M., Henshel, D. S., Flora, L., Cains, M. G., Hoffman, B., & Sample, C. (2018). Characterizing and measuring maliciousness for cybersecurity risk assessment. Frontiers in Psychology, 9, 39.","journal-title":"Frontiers in Psychology"},{"issue":"3","key":"9732_CR93","doi-asserted-by":"crossref","first-page":"52","DOI":"10.1111\/j.1540-4560.1977.tb01882.x","volume":"33","author":"PH Klopfer","year":"1977","unstructured":"Klopfer, P. H., & Rubenstein, D. I. (1977). The concept privacy and its biological basis. Journal of Social Issues, 33(3), 52\u201365.","journal-title":"Journal of Social Issues"},{"key":"9732_CR94","unstructured":"Knightley, P. (2010, Mar.). 12. Foreign Policy: The history of the honey trap https:\/\/foreignpolicy.com\/2010\/03\/12\/the-history-of-the-honey-trap\/."},{"key":"9732_CR95","doi-asserted-by":"crossref","first-page":"113","DOI":"10.1016\/j.jisa.2014.09.005","volume":"22","author":"K Krombholz","year":"2015","unstructured":"Krombholz, K., Hobel, H., Huber, M., & Weippl, E. (2015). Advanced social engineering attacks. Journal of Information Security and Applications, 22, 113\u2013122.","journal-title":"Journal of Information Security and Applications"},{"issue":"2","key":"9732_CR96","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1754393.1754396","volume":"10","author":"P Kumaraguru","year":"2010","unstructured":"Kumaraguru, P., Sheng, S., Acquisti, A., Cranor, L. F., & Hong, J. (2010). Teaching Johnny not to fall for phish. ACM Transactions on Internet Technology (TOIT), 10(2), 1\u201331.","journal-title":"ACM Transactions on Internet Technology (TOIT)"},{"key":"9732_CR97","doi-asserted-by":"crossref","unstructured":"Lawson, P. A., Crowson, A. D., & Mayhorn, C. B. (2018). Baiting the hook: Exploring the interaction of personality and persuasion tactics in email phishing attacks. In S. Bagnara, R. Tartaglia, S. Albolino, T. Alexander, & Y. Fujita (Eds.), Proceedings of the 20th congress of the international ergonomics association (IEA 2018): Vol. V, Human simulation and virtual environments, work with computing systems (WWCS), process control (pp. 401\u2013406). Cham, Switzerland: Springer Nature Switzerland.","DOI":"10.1007\/978-3-319-96077-7_42"},{"issue":"2","key":"9732_CR98","doi-asserted-by":"crossref","first-page":"99","DOI":"10.1080\/08959285.2011.554467","volume":"24","author":"H Lee","year":"2011","unstructured":"Lee, H., & Dalal, R. S. (2011). The effects of performance extremities on ratings of dynamic performance. Human Performance, 24(2), 99\u2013118.","journal-title":"Human Performance"},{"key":"9732_CR99","volume-title":"Forum for incident response and security teams (FIRST) conference","author":"K Leune","year":"2006","unstructured":"Leune, K., & Tesink, S. (2006). Designing and developing an application for incident response teams. In Forum for incident response and security teams (FIRST) conference. MD, USA.: Baltimore https:\/\/www.first.org\/resources\/papers\/conference2006\/leune-kees-papers.pdf."},{"issue":"7","key":"9732_CR100","doi-asserted-by":"crossref","first-page":"1585","DOI":"10.1016\/j.paid.2008.01.014","volume":"44","author":"JA Litman","year":"2008","unstructured":"Litman, J. A. (2008). Interest and deprivation factors of epistemic curiosity. Personality and Individual Differences, 44(7), 1585\u20131595.","journal-title":"Personality and Individual Differences"},{"key":"9732_CR101","unstructured":"Lorenz, T. (2020, April 7). \u2018Zoombombing\u2019: When video conferences go wrong. https:\/\/www.nytimes.com\/2020\/03\/20\/style\/zoombombing-zoom-trolling.html"},{"key":"9732_CR102","unstructured":"Madon, M. (2018). Cybersecurity breakdown: Improving workplace awareness. Mimecast. https:\/\/www.mimecast.com\/blog\/2018\/12\/cybersecurity-breakdown-improving-workplace-awareness\/"},{"issue":"8","key":"9732_CR103","doi-asserted-by":"crossref","first-page":"1179","DOI":"10.1177\/0018720818789818","volume":"60","author":"J Martin","year":"2018","unstructured":"Martin, J., Dub\u00e9, C., & Coovert, M. D. (2018). Signal detection theory (SDT) is effective for modeling user behavior toward phishing and spear-phishing attacks. Human Factors, 60(8), 1179\u20131191.","journal-title":"Human Factors"},{"issue":"1","key":"9732_CR104","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1111\/j.1749-6632.2011.06200.x","volume":"1235","author":"R Mata","year":"2011","unstructured":"Mata, R., Josef, A. K., Samanez-Larkin, G. R., & Hertwig, R. (2011). Age differences in risky choice: A meta-analysis. Annals of the New York Academy of Sciences, 1235(1), 18\u201329.","journal-title":"Annals of the New York Academy of Sciences"},{"key":"9732_CR105","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1146\/annurev-orgpsych-012218-015106","volume":"6","author":"JE Mathieu","year":"2019","unstructured":"Mathieu, J. E., Gallagher, P. T., Domingo, M. A., & Klock, E. A. (2019). Embracing complexity: Reviewing the past decade of team effectiveness research. Annual Review of Organizational Psychology and Organizational Behavior, 6, 17\u201346.","journal-title":"Annual Review of Organizational Psychology and Organizational Behavior"},{"key":"9732_CR106","doi-asserted-by":"crossref","unstructured":"Mathieu, J. E., Hollenbeck, J. R., van Knippenberg, D., & Ilgen, D. R. (2017). A century of work teams in the journal of applied psychology. Journal of Applied Psychology, 102(3), 452\u2013467.","DOI":"10.1037\/apl0000128"},{"key":"9732_CR107","first-page":"289","volume-title":"International handbook of work and organizational psychology","author":"JE Mathieu","year":"2001","unstructured":"Mathieu, J. E., Marks, M. A., & Zaccaro, S. J. (2001). Multi-team systems. In N. Anderson, D. Ones, H. K. Sinangil, & C. Viswesvaran (Eds.), International handbook of work and organizational psychology (Vol. 2, pp. 289\u2013313). London, U.K.: Sage Publications."},{"key":"9732_CR108","volume-title":"Analysis and detection of malicious insiders","author":"M Maybury","year":"2005","unstructured":"Maybury, M., Chase, P., Cheikes, B., Brackney, D., Matzner, S., Hetherington, T., Wood, B., Sibley, C., Marin, J., Longstaff, T., Spitzner, L., Haile, J., Copeland, J., & Lewandowski, S. (2005). Analysis and detection of malicious insiders. Bedford, MA: MITRE https:\/\/www.mitre.org\/sites\/default\/files\/pdf\/05_0207.pdf."},{"issue":"3","key":"9732_CR109","doi-asserted-by":"crossref","first-page":"709","DOI":"10.2307\/258792","volume":"20","author":"RC Mayer","year":"1995","unstructured":"Mayer, R. C., Davis, J. H., & Schoorman, F. D. (1995). An integrative model of organizational trust. Academy of Management Review, 20(3), 709\u2013734.","journal-title":"Academy of Management Review"},{"key":"9732_CR110","unstructured":"Merez, A. (2019, January 19). Over 900,000 affected by Cebuana Lhuillier data breach. ABS-CBN News. https:\/\/news.abs-cbn.com\/business\/01\/19\/19\/over-900000-affected-by-cebuana-lhuillier-data-breach"},{"issue":"1","key":"9732_CR111","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1177\/0149206309349309","volume":"36","author":"RD Meyer","year":"2010","unstructured":"Meyer, R. D., Dalal, R. S., & Hermida, R. (2010). A review and synthesis of situational strength in the organizational sciences. Journal of Management, 36(1), 121\u2013140.","journal-title":"Journal of Management"},{"issue":"4","key":"9732_CR112","doi-asserted-by":"crossref","first-page":"853","DOI":"10.2307\/259247","volume":"22","author":"RK Mitchell","year":"1997","unstructured":"Mitchell, R. K., Agle, B. R., & Wood, D. J. (1997). Toward a theory of stakeholder identification and salience: Defining the principle of who and what really counts. Academy of Management Review, 22(4), 853\u2013886.","journal-title":"Academy of Management Review"},{"issue":"9","key":"9732_CR113","doi-asserted-by":"crossref","first-page":"549","DOI":"10.3182\/20130619-3-RU-3018.00546","volume":"46","author":"K Mls","year":"2013","unstructured":"Mls, K., & Ot\u010den\u00e1\u0161kov\u00e1, T. (2013). Analysis of complex decisional situations in companies with the support of AHP extension of Vroom-Yetton contingency model. IFAC Proceedings, 46(9), 549\u2013554.","journal-title":"IFAC Proceedings"},{"key":"9732_CR114","unstructured":"Moniz, J. (2018, Oct. 18). Is compliance compromising your information security culture? Carnegie Mellon University Software Engineering Institute https:\/\/insights.sei.cmu.edu\/insider-threat\/2018\/10\/is-compliance-compromising-your-information-security-culture.html."},{"key":"9732_CR115","doi-asserted-by":"crossref","unstructured":"Moore, A. P., Hanley, M., & Mundie, D. (2011, October). A pattern for increased monitoring for intellectual property theft by departing insiders. In Proceedings of the 18th Conference on Pattern Languages of Programs (pp. 1-10).","DOI":"10.1145\/2578903.2579157"},{"issue":"4","key":"9732_CR116","doi-asserted-by":"crossref","first-page":"515","DOI":"10.5465\/amr.2012.0099","volume":"40","author":"FP Morgeson","year":"2015","unstructured":"Morgeson, F. P., Mitchell, T. R., & Liu, D. (2015). Event system theory: An event-oriented approach to the organizational sciences. Academy of Management Review, 40(4), 515\u2013537.","journal-title":"Academy of Management Review"},{"issue":"4","key":"9732_CR117","doi-asserted-by":"publisher","first-page":"453","DOI":"10.1002\/job.1809","volume":"34","author":"P Mussel","year":"2013","unstructured":"Mussel, P. (2013). Introducing the construct curiosity for predicting job performance. Journal of Organizational Behavior, 34(4), 453\u2013472. https:\/\/doi.org\/10.1002\/job.1809.","journal-title":"Journal of Organizational Behavior"},{"issue":"2","key":"9732_CR118","doi-asserted-by":"crossref","first-page":"109","DOI":"10.1027\/1015-5759\/a000098","volume":"28","author":"P Mussel","year":"2012","unstructured":"Mussel, P., Spengler, M., Litman, J. A., & Schuler, H. (2012). Development and validation of the German work-related curiosity scale. European Journal of Psychological Assessment, 28(2), 109\u2013116.","journal-title":"European Journal of Psychological Assessment"},{"key":"9732_CR119","unstructured":"National Initiative for Cybersecurity Careers and Studies (NICCS). (2018). Explore terms: A glossary of common cybersecurity terminology. https:\/\/niccs.us-cert.gov\/about-niccs\/glossary"},{"key":"9732_CR120","unstructured":"NCSC-NL (2015). CSIRT Maturity Kit: A step-by-step guide towards enhancing CSIRT Maturity. https:\/\/www.ncsc.nl\/binaries\/ncsc\/documenten\/publicaties\/2019\/mei\/01\/csirt-maturity-kit\/CSIRT_MK_guide.pdf"},{"key":"9732_CR121","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1037\/10662-002","volume-title":"The psychology of workplace safety","author":"A Neal","year":"2004","unstructured":"Neal, A., & Griffin, M. A. (2004). Safety climate and safety at work. In J. Barling & M. R. Frone (Eds.), The psychology of workplace safety (pp. 15\u201334). Washington, D.C.: American Psychological Association."},{"key":"9732_CR122","doi-asserted-by":"crossref","unstructured":"Newhouse, W., Keith, S., Scribner, B., & Witte, G. (2017). National Initiative for Cybersecurity Education (NICE) cybersecurity workforce framework. https:\/\/nvlpubs.nist.gov\/nistpubs\/SpecialPublications\/NIST.SP.800-181.pdf","DOI":"10.6028\/NIST.SP.800-181"},{"issue":"2","key":"9732_CR123","doi-asserted-by":"crossref","first-page":"392","DOI":"10.1037\/0021-9010.93.2.392","volume":"93","author":"TW Ng","year":"2008","unstructured":"Ng, T. W., & Feldman, D. C. (2008). The relationship of age to ten dimensions of job performance. Journal of Applied Psychology, 93(2), 392\u2013423.","journal-title":"Journal of Applied Psychology"},{"key":"9732_CR124","volume-title":"Management information systems","author":"JA O\u2019Brien","year":"2011","unstructured":"O\u2019Brien, J. A., & Marakas, G. M. (2011). Management information systems (10th ed.). New York, NY: McGraw Hill\/Irwin.","edition":"10"},{"key":"9732_CR125","unstructured":"O\u2019Sullivan, D. (2019, October 18). We asked a hacker to try and steal a CNN tech reporter's data. CNN: Here's what happened https:\/\/www.cnn.com\/2019\/10\/18\/tech\/reporter-hack\/index.html."},{"key":"9732_CR126","doi-asserted-by":"crossref","unstructured":"Oliveira, D., Rocha, H., Yang, H., Ellis, D., Dommaraju, S., Muradoglu, M., Weir, D., Soliman, A., Lin, T., & Ebner, N. (2017, May). Dissecting spear phishing emails for older vs young adults: On the interplay of weapons of influence and life domains in predicting susceptibility to phishing. In Proceedings of the 2017 CHI Conference on Human Factors in Computing Systems (pp. 6412-6424). https:\/\/ebnerlab.psych.ufl.edu\/files\/p6412-oliveira.pdf","DOI":"10.1145\/3025453.3025831"},{"key":"9732_CR127","doi-asserted-by":"crossref","first-page":"253","DOI":"10.1007\/978-3-319-41932-9_21","volume-title":"Advances in human factors in cybersecurity","author":"W Patterson","year":"2016","unstructured":"Patterson, W., Winston, C., & Fleming, L. (2016). Behavioral cybersecurity: Human factors in the cybersecurity curriculum. In D. Nicholson (Ed.), Advances in human factors in cybersecurity (pp. 253\u2013266). Basel, Switzerland: Springer International Publishing."},{"issue":"4","key":"9732_CR128","doi-asserted-by":"crossref","first-page":"597","DOI":"10.1016\/j.cose.2011.12.010","volume":"31","author":"SL Pfleeger","year":"2012","unstructured":"Pfleeger, S. L., & Caputo, D. D. (2012). Leveraging behavioral science to mitigate cyber security risk. Computers & Security, 31(4), 597\u2013611.","journal-title":"Computers & Security"},{"key":"9732_CR129","first-page":"43","volume-title":"Organizational behavior in health care","author":"J Pickens","year":"2005","unstructured":"Pickens, J. (2005). Attitudes and perceptions. In N. Borkowski (Ed.), Organizational behavior in health care (pp. 43\u201376). Sudbury, MA: Jones and Bartlett."},{"key":"9732_CR130","doi-asserted-by":"crossref","first-page":"110","DOI":"10.1016\/j.ress.2012.09.011","volume":"110","author":"L Pi\u00e8tre-Cambac\u00e9d\u00e8s","year":"2013","unstructured":"Pi\u00e8tre-Cambac\u00e9d\u00e8s, L., & Bouissou, M. (2013). Cross-fertilization between safety and security engineering. Reliability Engineering & System Safety, 110, 110\u2013126.","journal-title":"Reliability Engineering & System Safety"},{"issue":"3642","key":"9732_CR131","doi-asserted-by":"crossref","first-page":"347","DOI":"10.1126\/science.146.3642.347","volume":"146","author":"JR Platt","year":"1964","unstructured":"Platt, J. R. (1964). Strong inference. Science, 146(3642), 347\u2013353.","journal-title":"Science"},{"key":"9732_CR132","unstructured":"Porter, K. (2019). 2019 data breaches: 4 billion records breached so far. Norton. https:\/\/us.norton.com\/internetsecurity-emerging-threats-2019-data-breaches.html#:~:text=Mega%2Dbreaches%20grab%20headlines%2C%20but,a%20record%20pace%20in%202019."},{"key":"9732_CR133","doi-asserted-by":"crossref","unstructured":"Poser, M., & Bittner, E. A. C. (March, 2020). Hybrid teamwork: Consideration of teamwork concepts to reach naturalistic interaction between humans and conversational agents. In Presented at the 15th international conference on Wirtschaftsinformatik. Germany: Pottsdam https:\/\/bit.ly\/3hphVw8.","DOI":"10.30844\/wi_2020_a6-poser"},{"key":"9732_CR134","unstructured":"Posey, C., & Canham, M. (2018). A computational social science approach to examine the duality between productivity and cybersecurity policy compliance within organizations. Paper presented at the 2018 International conference on social computing, Behavioral-Cultural Modeling & Prediction and Behavior Representation in Modeling and Simulation, Washington, D.C."},{"issue":"6","key":"9732_CR135","doi-asserted-by":"crossref","first-page":"585","DOI":"10.1057\/s41303-017-0065-y","volume":"26","author":"C Posey","year":"2017","unstructured":"Posey, C., Raja, U., Crossler, R. E., & Burns, A. J. (2017). Taking stock of organisations\u2019 protection of privacy: Categorising and assessing threats to personally identifiable information in the USA. European Journal of Information Systems, 26(6), 585\u2013604.","journal-title":"European Journal of Information Systems"},{"issue":"5","key":"9732_CR136","doi-asserted-by":"crossref","first-page":"551","DOI":"10.1016\/j.im.2014.03.009","volume":"51","author":"C Posey","year":"2014","unstructured":"Posey, C., Roberts, T. L., Lowry, P. B., & Hightower, R. T. (2014). Bridging the divide: A qualitative comparison of information security thought patterns between information security professionals and ordinary organizational insiders. Information & Management, 51(5), 551\u2013567.","journal-title":"Information & Management"},{"issue":"4","key":"9732_CR137","doi-asserted-by":"crossref","first-page":"1189","DOI":"10.25300\/MISQ\/2013\/37.4.09","volume":"37","author":"C Posey","year":"2013","unstructured":"Posey, C., Roberts, T. L., Lowry, P. B., Bennett, R. J., & Courtney, J. F. (2013). Insiders' protection of organizational information assets: Development of a systematics-based taxonomy and theory of diversity for protection-motivated behaviors. MIS Quarterly, 37(4), 1189\u20131210.","journal-title":"MIS Quarterly"},{"issue":"3","key":"9732_CR138","doi-asserted-by":"crossref","first-page":"229","DOI":"10.1016\/j.cose.2006.10.004","volume":"26","author":"GV Post","year":"2007","unstructured":"Post, G. V., & Kagan, A. (2007). Evaluating information security tradeoffs: Restricting access can interfere with user tasks. Computers & Security, 26(3), 229\u2013237.","journal-title":"Computers & Security"},{"key":"9732_CR139","first-page":"45","volume-title":"Cross currents: Cultures, communities, technologies","author":"M Prensky","year":"2013","unstructured":"Prensky, M. (2013). Digital natives, digital immigrants. In K. L. Blair, J. Almjeld, & R. M. Murphy (Eds.), Cross currents: Cultures, communities, technologies (pp. 45\u201351). Boston, MA: Wadsworth."},{"issue":"4","key":"9732_CR140","doi-asserted-by":"crossref","first-page":"299","DOI":"10.1207\/S15327043HUP1504_01","volume":"15","author":"ED Pulakos","year":"2002","unstructured":"Pulakos, E. D., Schmitt, N., Dorsey, D. W., Arad, S., Borman, W. C., & Hedge, J. W. (2002). Predicting adaptive performance: Further tests of a model of adaptability. Human Performance, 15(4), 299\u2013323.","journal-title":"Human Performance"},{"key":"9732_CR141","unstructured":"Rahman, M., & Donahue, S. E. (2010). Convergence of corporate and information security. https:\/\/www.researchgate.net\/profile\/Syed_Rahman10\/publication\/41393182_Convergence_of_Corporate_and_Information_Security\/links\/0f31753a4b8a0014b9000000\/Convergence-of-Corporate-and-Information-Security.pdf"},{"key":"9732_CR142","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9781139062367","volume-title":"Human error","author":"J Reason","year":"1990","unstructured":"Reason, J. (1990). Human error. Cambridge, U.K.: Cambridge University Press."},{"issue":"2","key":"9732_CR143","doi-asserted-by":"crossref","first-page":"490","DOI":"10.1037\/0021-9010.92.2.490","volume":"92","author":"J Reb","year":"2007","unstructured":"Reb, J., & Cropanzano, R. (2007). Evaluating dynamic performance: The influence of salient gestalt characteristics on performance ratings. Journal of Applied Psychology, 92(2), 490\u2013499.","journal-title":"Journal of Applied Psychology"},{"issue":"6","key":"9732_CR144","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1080\/00970050.1990.10614589","volume":"21","author":"GE Richardson","year":"1990","unstructured":"Richardson, G. E., Neiger, B., Jensen, S., & Kumpfer, K. (1990). The resiliency model. Health Education, 21(6), 33\u201339.","journal-title":"Health Education"},{"issue":"2","key":"9732_CR145","doi-asserted-by":"crossref","first-page":"555","DOI":"10.2307\/256693","volume":"38","author":"SL Robinson","year":"1995","unstructured":"Robinson, S. L., & Bennett, R. J. (1995). A typology of deviant workplace behaviors: A multidimensional scaling study. Academy of Management Journal, 38(2), 555\u2013572.","journal-title":"Academy of Management Journal"},{"key":"9732_CR146","first-page":"3","volume-title":"Research on negotiation in organizations","author":"SL Robinson","year":"1997","unstructured":"Robinson, S. L., & Bennett, R. J. (1997). Workplace deviance: Its definition, its manifestations, and its causes. In R. J. Lewicki, R. J. Bies, & B. H. Sheppard (Eds.), Research on negotiation in organizations (Vol. 6, pp. 3\u201327). Stanford, CT: JAI Press."},{"key":"9732_CR147","unstructured":"Rouse, M. (2016). Definition: CISO (chief information security officer). Techtarget. https:\/\/searchsecurity.techtarget.com\/definition\/CISO-chief-information-security-officer"},{"key":"9732_CR148","unstructured":"Ruefle R., van Wyk K., & Tosic, L. (2013). New Zealand security incident management guide for computer security incident response teams (CSIRTs). https:\/\/www.ncsc.govt.nz\/assets\/NCSC-Documents\/New-Zealand-Security-Incident-Management-Guide-for-Computer-Security-Incident-Response-Teams-CSIRTs.pdf"},{"key":"9732_CR149","unstructured":"Ruefle, R. (2007). Defining computer security incident response teams. Cybersecurity and Infrastructure Security Agency. https:\/\/www.us-cert.gov\/bsi\/articles\/best-practices\/incident-management\/defining-computer-security-incident-response-teams"},{"issue":"4","key":"9732_CR150","doi-asserted-by":"crossref","first-page":"599","DOI":"10.1002\/hrm.21628","volume":"54","author":"E Salas","year":"2014","unstructured":"Salas, E., Shuffler, M. L., Thayer, A. L., Bedwell, W. L., & Lazzara, E. H. (2014). Understanding and improving teamwork in organizations: A scientifically based practical guide. Human Resource Management, 54(4), 599\u2013622.","journal-title":"Human Resource Management"},{"key":"9732_CR151","volume-title":"Analysis of energy delivery sector malware attack response mechanisms [unpublished master\u2019s thesis]","author":"ML Sapienza","year":"2019","unstructured":"Sapienza, M. L. (2019). Analysis of energy delivery sector malware attack response mechanisms [unpublished master\u2019s thesis]. Massachusetts Institute of Technology."},{"key":"9732_CR152","first-page":"13","volume-title":"Security and usability: Designing secure systems that people can use","author":"MA Sasse","year":"2005","unstructured":"Sasse, M. A., & Flechais, I. (2005). Usable security: Why do we need it? How do we get it? In L. F. Cranor & S. Garfinkel (Eds.), Security and usability: Designing secure systems that people can use (pp. 13\u201330). Sebastopol, CA: O\u2019Reilly Media."},{"issue":"3","key":"9732_CR153","doi-asserted-by":"crossref","first-page":"377","DOI":"10.1177\/0018720816634228","volume":"58","author":"KE Schaefer","year":"2016","unstructured":"Schaefer, K. E., Chen, J. Y., Szalma, J. L., & Hancock, P. A. (2016). A meta-analysis of factors influencing the development of trust in automation: Implications for understanding autonomy in future systems. Human Factors, 58(3), 377\u2013400.","journal-title":"Human Factors"},{"issue":"2","key":"9732_CR154","doi-asserted-by":"crossref","first-page":"220","DOI":"10.1037\/0021-9010.87.2.220","volume":"87","author":"B Schneider","year":"2002","unstructured":"Schneider, B., Salvaggio, A. N., & Subirats, M. (2002). Climate strength: A new direction for climate research. Journal of Applied Psychology, 87(2), 220\u2013229.","journal-title":"Journal of Applied Psychology"},{"key":"9732_CR155","doi-asserted-by":"crossref","unstructured":"Seeber, I., Bittner, E., Briggs, R. O., de Vreede, T., De Vreede, G.-J., Elkins, A., Maier, R., Merz, A. B., Oeste-Rei\u03b2, S., Randrup, N., Schwabe, G., & S\u00f6llner, M. (2020). Machines as teammates: A research agenda on AI in team collaboration. In press at Information & Management.","DOI":"10.1016\/j.im.2019.103174"},{"issue":"4","key":"9732_CR156","doi-asserted-by":"crossref","first-page":"543","DOI":"10.1007\/s10869-010-9183-4","volume":"25","author":"LR Shanock","year":"2010","unstructured":"Shanock, L. R., Baran, B. E., Gentry, W. A., Pattison, S. C., & Heggestad, E. D. (2010). Polynomial regression with response surface analysis: A powerful approach for examining moderation and overcoming limitations of difference scores. Journal of Business and Psychology, 25(4), 543\u2013554.","journal-title":"Journal of Business and Psychology"},{"key":"9732_CR157","doi-asserted-by":"crossref","unstructured":"Sheng, S., Holbrook, M., Kumaraguru, P., Cranor, L. F., & Downs, J. (2010, April). Who falls for phish? A demographic analysis of phishing susceptibility and effectiveness of interventions. Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (pp. 373-382). http:\/\/lorrie.cranor.org\/pubs\/pap1162-sheng.pdf","DOI":"10.1145\/1753326.1753383"},{"issue":"1","key":"9732_CR158","doi-asserted-by":"crossref","first-page":"92","DOI":"10.5465\/annals.2018.0121","volume":"14","author":"A Shipilov","year":"2020","unstructured":"Shipilov, A., & Gawer, A. (2020). Integrating research on interorganizational networks and ecosystems. Academy of Management Annals, 14(1), 92\u2013121.","journal-title":"Academy of Management Annals"},{"key":"9732_CR159","doi-asserted-by":"crossref","first-page":"274","DOI":"10.1016\/j.cose.2014.06.007","volume":"45","author":"M Silic","year":"2014","unstructured":"Silic, M., & Back, A. (2014). Shadow IT\u2013A view from behind the curtain. Computers & Security, 45, 274\u2013283.","journal-title":"Computers & Security"},{"key":"9732_CR160","first-page":"252","volume-title":"Working conference on method engineering","author":"G Sindre","year":"2007","unstructured":"Sindre, G. (2007, September). A look at misuse cases for safety concerns. In Working conference on method engineering (pp. 252\u2013266). Boston, MA: Springer."},{"key":"9732_CR161","doi-asserted-by":"crossref","first-page":"154","DOI":"10.1016\/j.cose.2016.04.003","volume":"60","author":"F Skopik","year":"2016","unstructured":"Skopik, F., Settanni, G., & Fiedler, R. (2016). A problem shared is a problem halved: A survey on the dimensions of collective cyber defense through security information sharing. Computers & Security, 60, 154\u2013176.","journal-title":"Computers & Security"},{"issue":"8","key":"9732_CR162","doi-asserted-by":"crossref","first-page":"963","DOI":"10.1287\/mnsc.35.8.963","volume":"35","author":"GF Smith","year":"1989","unstructured":"Smith, G. F. (1989). Defining managerial problems: A framework for prescriptive theorizing. Management Science, 35(8), 963\u2013981.","journal-title":"Management Science"},{"key":"9732_CR163","unstructured":"Software Engineering Institute (SEI). (2014). Software assurance for executives: Definitions. https:\/\/resources.sei.cmu.edu\/asset_files\/EducationalMaterial\/2014_011_001_81821.pdf"},{"issue":"3","key":"9732_CR164","doi-asserted-by":"crossref","first-page":"446","DOI":"10.1016\/j.jvb.2005.10.005","volume":"68","author":"PE Spector","year":"2006","unstructured":"Spector, P. E., Fox, S., Penney, L. M., Bruursema, K., Goh, A., & Kessler, S. (2006). The dimensionality of counterproductivity: Are all counterproductive behaviors created equal? Journal of Vocational Behavior, 68(3), 446\u2013460.","journal-title":"Journal of Vocational Behavior"},{"key":"9732_CR165","doi-asserted-by":"crossref","first-page":"178","DOI":"10.1016\/j.future.2018.09.063","volume":"92","author":"J Srinivas","year":"2019","unstructured":"Srinivas, J., Das, A. K., & Kumar, N. (2019). Government regulations in cyber security: Framework, standards and recommendations. Future Generation Computer Systems, 92, 178\u2013188.","journal-title":"Future Generation Computer Systems"},{"issue":"4","key":"9732_CR166","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1109\/MSP.2015.71","volume":"13","author":"J Steinke","year":"2015","unstructured":"Steinke, J., Bolunmez, B., Fletcher, L., Wang, V., Tomassetti, A. J., Repchik, K. M., Zaccaro, S. J., Dalal, R. S., & Tetrick, L. E. (2015). Improving cybersecurity incident response team effectiveness using teams-based research. IEEE Security & Privacy, 13(4), 20\u201329.","journal-title":"IEEE Security & Privacy"},{"key":"9732_CR167","unstructured":"Stikvoort, D. (2010, September 1). SIM3: Security incident management maturity model. https:\/\/www.terena.org\/activities\/tf-csirt\/publications\/SIM3-v15.pdf"},{"key":"9732_CR168","volume-title":"Pasteur\u2019s quadrant: Basic science and technological innovation","author":"DE Stokes","year":"1997","unstructured":"Stokes, D. E. (1997). Pasteur\u2019s quadrant: Basic science and technological innovation. Washington, D.C.: Brookings Institution Press."},{"key":"9732_CR169","first-page":"325","volume-title":"Managing social and ethical issues in organizations","author":"EF Stone-Romero","year":"2007","unstructured":"Stone-Romero, E. F., & Stone, D. L. (2007). Current perspectives on privacy in organizations. In S. W. Gilliland, D. D. Steiner, & D. P. Skarlicki (Eds.), Managing social and ethical issues in organizations (pp. 325\u2013362). Greenwich, CT: Information Age."},{"issue":"4","key":"9732_CR170","doi-asserted-by":"crossref","first-page":"441","DOI":"10.2307\/249551","volume":"22","author":"DW Straub","year":"1998","unstructured":"Straub, D. W., & Welke, R. J. (1998). Coping with systems risk: Security planning models for management decision making. MIS Quarterly, 22(4), 441\u2013469.","journal-title":"MIS Quarterly"},{"key":"9732_CR171","unstructured":"Symantec. (2019, February). ITSR internet security threat report. https:\/\/docs.broadcom.com\/doc\/istr-24-2019-en"},{"key":"9732_CR172","volume-title":"Improving social maturity of cybersecurity incident response teams","author":"LE Tetrick","year":"2016","unstructured":"Tetrick, L. E., Zaccaro, S. J., Dalal, R. S., Steinke, J. A., Repchick, K. M., Hargrove, A. K., Shore, D. B., Winslow, C. J., Chen, T. R., Green, J. P., Bolunmez, B., Tomassetti, A. J., McCausland, T. C., Fletcher, L., Sheng, Z., Schrader, S. W., Gorab, A. K., Niu, Q., & Wang, V. (2016). Improving social maturity of cybersecurity incident response teams. Fairfax, VA: George Mason University http:\/\/calctraining2015.weebly.com\/the-handbook.html."},{"issue":"3","key":"9732_CR173","doi-asserted-by":"crossref","first-page":"525","DOI":"10.1177\/1094428116677299","volume":"21","author":"S Tonidandel","year":"2018","unstructured":"Tonidandel, S., King, E., & Cortina, J. (2018). Big data methods: Leveraging modern data analytic techniques to build organizational science. Organizational Research Methods, 21(3), 525\u2013547.","journal-title":"Organizational Research Methods"},{"issue":"7","key":"9732_CR174","doi-asserted-by":"crossref","first-page":"407","DOI":"10.1089\/cyber.2017.0028","volume":"20","author":"SG van de Weijer","year":"2017","unstructured":"van de Weijer, S. G., & Leukfeldt, E. R. (2017). Big five personality traits of cybercrime victims. Cyberpsychology, Behavior and Social Networking, 20(7), 407\u2013412.","journal-title":"Cyberpsychology, Behavior and Social Networking"},{"issue":"2","key":"9732_CR175","doi-asserted-by":"crossref","first-page":"355","DOI":"10.25300\/MISQ\/2018\/14124","volume":"42","author":"A Vance","year":"2018","unstructured":"Vance, A., Jenkins, J. L., Anderson, B. B., Bjornn, D. K., & Kirwan, C. B. (2018). Tuning out security warnings: A longitudinal examination of habituation through FMRI, eye tracking, and field experiments. MIS Quarterly, 42(2), 355\u2013380.","journal-title":"MIS Quarterly"},{"issue":"3\u20134","key":"9732_CR176","doi-asserted-by":"crossref","first-page":"190","DOI":"10.1016\/j.im.2012.04.002","volume":"49","author":"A Vance","year":"2012","unstructured":"Vance, A., Siponen, M., & Pahnila, S. (2012). Motivating IS security compliance: Insights from habit and protection motivation theory. Information & Management, 49(3\u20134), 190\u2013198.","journal-title":"Information & Management"},{"issue":"4","key":"9732_CR177","doi-asserted-by":"crossref","first-page":"1060","DOI":"10.1080\/07421222.2018.1523531","volume":"35","author":"S Venkatraman","year":"2018","unstructured":"Venkatraman, S., Cheung, C., Lee, Z., Davis, F., & Venkatesh, V. (2018). The \u201cDarth\u201d side of technology use: An inductively derived typology of cyberdeviance. Journal of Management Information Systems, 35(4), 1060\u20131091.","journal-title":"Journal of Management Information Systems"},{"key":"9732_CR178","doi-asserted-by":"crossref","unstructured":"Verizon. (2019). 2019 data breach investigations report. Verizon. https:\/\/enterprise.verizon.com\/resources\/reports\/dbir\/","DOI":"10.1016\/S1361-3723(19)30060-0"},{"key":"9732_CR179","unstructured":"Vincent, J. (2018, July 20). 1.5 million affected by hack targeting Singapore\u2019s health data. The verge. https:\/\/www.theverge.com\/2018\/7\/20\/17594578\/singapore-health-data-hack-sing-health-prime-minister-lee-targeted."},{"issue":"10","key":"9732_CR180","doi-asserted-by":"crossref","first-page":"198","DOI":"10.1016\/j.chb.2016.05.035","volume":"63","author":"A Vishwanath","year":"2016","unstructured":"Vishwanath, A. (2016). Mobile device affordance: Explicating how smartphones influence the outcome of phishing attacks. Computers in Human Behavior, 63(10), 198\u2013207.","journal-title":"Computers in Human Behavior"},{"issue":"3","key":"9732_CR181","doi-asserted-by":"crossref","first-page":"576","DOI":"10.1016\/j.dss.2011.03.002","volume":"51","author":"A Vishwanath","year":"2011","unstructured":"Vishwanath, A., Herath, T., Chen, R., Wang, J., & Rao, H. R. (2011). Why do people get phished? Testing individual differences in phishing vulnerability within an integrated, information processing model. Decision Support Systems, 51(3), 576\u2013586.","journal-title":"Decision Support Systems"},{"key":"9732_CR182","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1016\/j.cose.2013.04.004","volume":"38","author":"R von Solms","year":"2013","unstructured":"von Solms, R., & van Niekerk, J. (2013). From information security to cyber security. Computers & Security, 38, 97\u2013102.","journal-title":"Computers & Security"},{"key":"9732_CR183","volume-title":"The new leadership: Managing participation in organizations","author":"VH Vroom","year":"1988","unstructured":"Vroom, V. H., & Jago, A. G. (1988). The new leadership: Managing participation in organizations. Englewood Cliffs, NJ: Prentice Hall."},{"key":"9732_CR184","doi-asserted-by":"crossref","DOI":"10.2307\/j.ctt6wrc8r","volume-title":"Leadership and decision making","author":"VH Vroom","year":"1973","unstructured":"Vroom, V. H., & Yetton, P. W. (1973). Leadership and decision making. Pittsburgh, PA: University of Pittsburgh Press."},{"key":"9732_CR185","series-title":"Proceedings of the SIGCHI conference on human factors in computing systems (pp. 3439\u20133448)","volume-title":"Should I open this email? Inbox-level cues, curiosity and attention to email","author":"J Wainer","year":"2011","unstructured":"Wainer, J., Dabbish, L., & Kraut, R. (2011). Should I open this email? Inbox-level cues, curiosity and attention to email, Proceedings of the SIGCHI conference on human factors in computing systems (pp. 3439\u20133448). Canada: Vancouver."},{"issue":"2","key":"9732_CR186","doi-asserted-by":"crossref","first-page":"112","DOI":"10.2307\/41165243","volume":"29","author":"KE Weick","year":"1987","unstructured":"Weick, K. E. (1987). Organizational culture as a source of high reliability. California Management Review, 29(2), 112\u2013127.","journal-title":"California Management Review"},{"issue":"1","key":"9732_CR187","doi-asserted-by":"crossref","first-page":"1","DOI":"10.25300\/MISQ\/2013\/37.1.01","volume":"37","author":"R Willison","year":"2013","unstructured":"Willison, R., & Warkentin, M. (2013). Beyond deterrence: An expanded view of employee computer abuse. MIS Quarterly, 37(1), 1\u201320.","journal-title":"MIS Quarterly"},{"key":"9732_CR188","volume-title":"Case study research: Design and methods","author":"RK Yin","year":"2017","unstructured":"Yin, R. K. (2017). Case study research: Design and methods (6th ed.). Thousand Oaks, CA: Sage.","edition":"6"},{"key":"9732_CR189","first-page":"225","volume-title":"Team creativity and innovation","author":"SJ Zaccaro","year":"2017","unstructured":"Zaccaro, S. J., Fletcher, L. S., & DeChurch, L. A. (2017). Creativity and innovation in multiteam systems. In R. Reiter-Palmon (Ed.), Team creativity and innovation (pp. 225\u2013255). New York, NY: Oxford University Press."},{"key":"9732_CR190","doi-asserted-by":"crossref","DOI":"10.4324\/9781315796352","volume-title":"Psychosocial dynamics of cyber security","author":"SJ Zaccaro","year":"2016","unstructured":"Zaccaro, S. J., Hargrove, A., Chen, T. R., Repchick, K., & McCausland, T. (2016). A comprehensive multilevel taxonomy of cybersecurity incident response performance. In S. J. Zaccaro, R. D. Dalal, L. E. Tetrick, & J. A. Steinke (Eds.), Psychosocial dynamics of cyber security. New York, NY: Routledge."},{"key":"9732_CR191","doi-asserted-by":"crossref","unstructured":"Zaccaro, S.J., Marks, M.A., & DeChurch, L.A. (2011). Multiteam systems: An organizational form for dynamic and complex environments. New York, NY: Routledge (Taylor & Francis).","DOI":"10.4324\/9780203814772"},{"key":"9732_CR192","first-page":"307","volume-title":"Leader thinking skills: Capacities for contemporary leadership","author":"SJ Zaccaro","year":"2020","unstructured":"Zaccaro, S. J., & Torres, E. M. (2020). Leader social acuity. In M. D. Mumford & C. A. Higgs (Eds.), Leader thinking skills: Capacities for contemporary leadership (pp. 307\u2013339). New York, NY: Routledge."},{"key":"9732_CR193","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1007\/978-1-4614-7579-8_5","volume-title":"Teaching and measuring cognitive readiness","author":"SJ Zaccaro","year":"2014","unstructured":"Zaccaro, S. J., Weis, E., Chen, T. R., & Matthews, M. D. (2014). Situational load and personal attributes: Implications for adaptive readiness and training. In H. F. O'Neil, R. S. Perez, & E. L. Baker (Eds.), Teaching and measuring cognitive readiness (pp. 93\u2013115). New York: Springer."},{"key":"9732_CR194","unstructured":"Zaccaro, S. J. Weis, E., Hilton, R., & Jeffries, J. (2011). Building resilient teams. In. P. Sweeney, M. Matthews, & P. Lester (Eds.), Leading in dangerous contexts (pp. 182-201). Annapolis, MD: Naval institute press."}],"container-title":["Journal of Business and Psychology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10869-021-09732-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10869-021-09732-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10869-021-09732-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,10,29]],"date-time":"2023-10-29T17:47:02Z","timestamp":1698601622000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10869-021-09732-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,2,4]]},"references-count":194,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2022,2]]}},"alternative-id":["9732"],"URL":"https:\/\/doi.org\/10.1007\/s10869-021-09732-9","relation":{},"ISSN":["0889-3268","1573-353X"],"issn-type":[{"value":"0889-3268","type":"print"},{"value":"1573-353X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,2,4]]},"assertion":[{"value":"5 January 2021","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 February 2021","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with ethical standards"}},{"value":"The authors have no known conflicts of interest to disclose.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}