{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,21]],"date-time":"2026-06-21T13:05:41Z","timestamp":1782047141487,"version":"3.54.5"},"reference-count":123,"publisher":"Emerald","issue":"5","license":[{"start":{"date-parts":[[2008,11,21]],"date-time":"2008-11-21T00:00:00Z","timestamp":1227225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.emerald.com\/insight\/site-policies"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2008,11,21]]},"abstract":"<jats:sec><jats:title content-type=\"abstract-heading\">Purpose<\/jats:title><jats:p>Recently, the role of human behavior has become a focal point in the study of information security countermeasures. However, few empirical studies have been conducted to test social engineering theory and the reasons why people may or may not fall victim, and even fewer have tested recommended treatments. Building on theory using threat control factors, the purpose of this paper is to compare the efficacy of recommended treatment protocols.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-heading\">Design\/methodology\/approach<\/jats:title><jats:p>A confirmatory factor analysis of a threat control model was conducted, followed by a randomized assessment of treatment effects using the model. The data were gathered using a questionnaire containing antecedent factors, and samples of social engineering security behaviors were observed.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-heading\">Findings<\/jats:title><jats:p>It was found that threat assessment, commitment, trust, and obedience to authority were strong indicators of social engineering threat success, and that treatment efficacy depends on which factors are most prominent.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-heading\">Originality\/value<\/jats:title><jats:p>This empirical study provides evidence for certain posited theoretical factors, but also shows that treatment efficacy for social engineering depends on targeting the appropriate factor. Researchers should investigate methods for factor assessment, and practitioners must develop interventions accordingly.<\/jats:p><\/jats:sec>","DOI":"10.1108\/09685220810920549","type":"journal-article","created":{"date-parts":[[2008,11,15]],"date-time":"2008-11-15T07:02:59Z","timestamp":1226732579000},"page":"463-483","source":"Crossref","is-referenced-by-count":49,"title":["A test of interventions for security threats from social engineering"],"prefix":"10.1108","volume":"16","author":[{"given":"Michael","family":"Workman","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"140","reference":[{"key":"key2022021720165414300_b1","doi-asserted-by":"crossref","unstructured":"Acquisti, A. and Grossklags, J. (2005), \u201cPrivacy and rationality in individual decision making\u201d, IEEE Security and Privacy, Vol. 3, pp. 26\u201033.","DOI":"10.1109\/MSP.2005.22"},{"key":"key2022021720165414300_b2","unstructured":"Albrechtsen, E. (2006), \u201cA qualitative study of users' view on information security\u201d, Computers & Security, Vol. 25, pp. 445\u201051."},{"key":"key2022021720165414300_b3","doi-asserted-by":"crossref","unstructured":"Aldoory, L. and van Dyke, M.A. (2006), \u201cThe roles of perceived shared involvement and information overload in understanding how audiences make meaning of news about bioterrorism\u201d, Journalism & Mass Communication Quarterly, Vol. 83, pp. 346\u201061.","DOI":"10.1177\/107769900608300208"},{"key":"key2022021720165414300_b4","doi-asserted-by":"crossref","unstructured":"Allen, N.J. and Meyer, J.P. (1990), \u201cThe measurement and antecedents of affective, continuance and normative commitment to the organization\u201d, Journal of Occupational Psychology, Vol. 63, pp. 1\u201018.","DOI":"10.1111\/j.2044-8325.1990.tb00506.x"},{"key":"key2022021720165414300_b5","doi-asserted-by":"crossref","unstructured":"Arkes, H. and Blumer, C. (1985), \u201cThe psychology of sunk cost\u201d, Organizational Behavior and Human Decision Process, Vol. 35, pp. 124\u201040.","DOI":"10.1016\/0749-5978(85)90049-4"},{"key":"key2022021720165414300_b6","doi-asserted-by":"crossref","unstructured":"Asch, S.E. (1946), \u201cForming impressions of personality\u201d, Journal of Abnormal and Social Psychology, Vol. 41, pp. 258\u201090.","DOI":"10.1037\/h0055756"},{"key":"key2022021720165414300_b111","unstructured":"Bartels, A. (2006), \u201cGlobal IT spending and investment forecast, 2006 to 2007\u201d, Forrester Research, November, pp. 4\u201031."},{"key":"key2022021720165414300_b7","doi-asserted-by":"crossref","unstructured":"Beck, K. and Wilson, C. (2000), \u201cDevelopment of affective organizational commitment: a cross\u2010sectional examination of change with tenure\u201d, Journal of Vocational Behavior, Vol. 56, pp. 114\u201036.","DOI":"10.1006\/jvbe.1999.1712"},{"key":"key2022021720165414300_b113","doi-asserted-by":"crossref","unstructured":"Berejikian, J.D. (2002), \u201cA cognitive theory of deterrence\u201d, Journal of Peace Research, Vol. 39, pp. 165\u201083.","DOI":"10.1177\/0022343302039002002"},{"key":"key2022021720165414300_b8","doi-asserted-by":"crossref","unstructured":"Bergman, M.E. (2006), \u201cThe relationship between affective and normative commitment: review and research agenda\u201d, Journal of Organizational Behavior, Vol. 27, pp. 645\u201063.","DOI":"10.1002\/job.372"},{"key":"key2022021720165414300_b9","unstructured":"Blass, T. (2000), \u201cInvited response to review of \u2018obedience to authority: current perspectives on the Milgram paradigm\u2019\u201d, British Journal of Educational Psychology, Vol. 70, pp. 624\u20105."},{"key":"key2022021720165414300_b10","doi-asserted-by":"crossref","unstructured":"Bommer, W.H., Johnson, J.L., Rich, G.A., Podsakoff, P.M. and MacKenzie, S.B. (1995), \u201cOn the interchangeability of objective and subjective measures of employee performance: a meta\u2010analysis\u201d, Personnel Psychology, Vol. 48, pp. 587\u2010605.","DOI":"10.1111\/j.1744-6570.1995.tb01772.x"},{"key":"key2022021720165414300_b116","doi-asserted-by":"crossref","unstructured":"Borrull, A.L. and Oppenheim, C. (2004), \u201cLegal aspects of the web\u201d, in Cronin, B. (Ed.), Annual Review of Information Science and Technology, Vol. 38, Information Today, Medford, NJ, pp. 483\u2010548.","DOI":"10.1002\/aris.1440380111"},{"key":"key2022021720165414300_b11","unstructured":"Brehm, J.W. (1966), A Theory of Psychological Reactance, Academic Press, New York, NY."},{"key":"key2022021720165414300_b12","doi-asserted-by":"crossref","unstructured":"Brehm, J.W. and Cole, N.H. (1966), \u201cEffects of a favor that reduces freedom\u201d, Journal of Personality and Social Psychology, Vol. 3, pp. 420\u20106.","DOI":"10.1037\/h0023034"},{"key":"key2022021720165414300_b15","unstructured":"Brookings Institute (2006), \u201cComputer ethics institute: the 10\u2010commandments of ethics\u201d, available at: www.brook.edu\/its\/cei\/cei_hp.htm (accessed 16 June 2008)."},{"key":"key2022021720165414300_b118","doi-asserted-by":"crossref","unstructured":"Burke, L.A. (1997), \u201cImproving positive transfer: a test of relapse prevention training on transfer outcomes\u201d, Human Resource Development Quarterly, Vol. 8, pp. 115\u201026.","DOI":"10.1002\/hrdq.3920080204"},{"key":"key2022021720165414300_b17","doi-asserted-by":"crossref","unstructured":"Cacioppo, J.T., Petty, R.E., Kao, C.F. and Rodriguez, R. (1986), \u201cCentral and peripheral routes to persuasion: an individual difference perspective\u201d, Journal of Personality and Social Psychology, Vol. 51, pp. 1032\u201043.","DOI":"10.1037\/0022-3514.51.5.1032"},{"key":"key2022021720165414300_b18","doi-asserted-by":"crossref","unstructured":"Calluzzo, V.J. and Cante, C.J. (2004), \u201cEthics in information technology and software use\u201d, Journal of Business Ethics, Vol. 51 No. 3, pp. 301\u201012.","DOI":"10.1023\/B:BUSI.0000032658.12032.4e"},{"key":"key2022021720165414300_b22","unstructured":"Cialdini, R.B. (2001), Influence: Science and Practice, Allyn & Bacon, Boston, MA."},{"key":"key2022021720165414300_b23","doi-asserted-by":"crossref","unstructured":"Debar, H. and Viinikka, J. (2006), \u201cSecurity information management as an outsourced service\u201d, Information Management & Computer Security, Vol. 14 No. 5, pp. 417\u201035.","DOI":"10.1108\/09685220610707430"},{"key":"key2022021720165414300_b24","doi-asserted-by":"crossref","unstructured":"Denis, T., Trobec, R., Pavei, N. and Tasi, J.F. (2007), \u201cInformation system security and human behavior\u201d, Behavior & Information Technology, Vol. 26, pp. 113\u20108.","DOI":"10.1080\/01449290500330299"},{"key":"key2022021720165414300_b25","doi-asserted-by":"crossref","unstructured":"Dodge, R.C., Carver, C. and Ferguson, A.J. (2007), \u201cPhishing for user security awareness\u201d, Computers & Security, Vol. 26, pp. 73\u201080.","DOI":"10.1016\/j.cose.2006.10.009"},{"key":"key2022021720165414300_b26","unstructured":"Donelson, E. (1973), Personality: A Scientific Approach, Goodyear Publishing, Pacific Palisades, CA."},{"key":"key2022021720165414300_b112","doi-asserted-by":"crossref","unstructured":"Dorn, L. and Brown, B. (2003), \u201cMaking sense of invulnerability at work \u2013 a qualitative study of police drivers\u201d, Safety Science, Vol. 41, pp. 837\u201059.","DOI":"10.1016\/S0925-7535(02)00036-X"},{"key":"key2022021720165414300_b30","unstructured":"FTC (2003), \u201cComplying with the telemarketing sales rule\u201d, available at: www.ftc.gov\/bcp\/conline\/pubs\/buspubs\/tsrcomp.htm (accessed 29 January 2007)."},{"key":"key2022021720165414300_b31","unstructured":"Gao, W. and Kim, J. (2007), \u201cSocial engineering: robbing the cradle is like taking candy from a baby\u201d, Proceedings of the Annual Conference of the Security Policy Institute, Amsterdam, NE, pp. 23\u201037."},{"key":"key2022021720165414300_b33","doi-asserted-by":"crossref","unstructured":"Gendall, P. (2005), \u201cCan you judge a questionnaire by its cover? The effect of questionnaire cover design on mail survey response\u201d, International Journal of Public Opinion Research, Vol. 17, pp. 346\u201061.","DOI":"10.1093\/ijpor\/edh067"},{"key":"key2022021720165414300_b35","unstructured":"Grossklags, J. and Acquisti, A. (2007), \u201cWhen 25 cents is too much: an experiment on willingness\u2010to\u2010sell and willingness\u2010to\u2010protect personal information\u201d, Sixth Workshop on the Economics of Information Security (WEIS 2007), Pittsburgh, PA, pp. 7\u201018."},{"key":"key2022021720165414300_b36","doi-asserted-by":"crossref","unstructured":"Grothmann, T. and Reusswig, F. (2006), \u201cPeople at risk of flooding: why some residents take precautionary action while others do not\u201d, Natural Hazards, Vol. 38, pp. 101\u201020.","DOI":"10.1007\/s11069-005-8604-6"},{"key":"key2022021720165414300_b37","unstructured":"Grunig, J.E. (1997), \u201cA situational theory of publics: conceptual history, recent challenges and new research\u201d, in Moss, D., MacManus, T. and Vercic, D. (Eds), Public Relations Research: An International Perspective, International Thomson Business Press, London, pp. 3\u201048."},{"key":"key2022021720165414300_b40","doi-asserted-by":"crossref","unstructured":"Harrington, S.J. (1996), \u201cThe effect of codes of ethics and personal denial of responsibility on computer abuse judgments and intentions\u201d, MIS Quarterly, Vol. 20, pp. 257\u20108.","DOI":"10.2307\/249656"},{"key":"key2022021720165414300_b41","doi-asserted-by":"crossref","unstructured":"Helm, C. and Morelli, M. (1985), \u201cObedience to authority in a laboratory setting: generalizability and context dependency\u201d, Political Studies, Vol. 14, pp. 610\u201027.","DOI":"10.1111\/j.1467-9248.1985.tb01584.x"},{"key":"key2022021720165414300_b42","unstructured":"Hochhauser, M. (2004), \u201cSmart executives, dumb decisions\u201d, Journal of Risk Management, Vol. 51, pp. 64\u201073."},{"key":"key2022021720165414300_b44","doi-asserted-by":"crossref","unstructured":"Hsu, M\u2010H. and Kuo, F\u2010Y. (2003), \u201cAn investigation of volitional control in information ethics\u201d, Behavior & Information Technology, Vol. 22, pp. 53\u201062.","DOI":"10.1080\/01449290301781"},{"key":"key2022021720165414300_b48","unstructured":"Keck, R. (2005), \u201cDisruptive technologies and the evolution of the law\u201d, Legal Briefs, Vol. 23 No. 1, pp. 22\u201049."},{"key":"key2022021720165414300_b120","unstructured":"Kline, R. (1998), Principles and Practices of Structural Equation Modeling, Guilford Press, New York, NY."},{"key":"key2022021720165414300_b51","doi-asserted-by":"crossref","unstructured":"Krishnan, R. and Martin, X. (2006), \u201cWhen does trust matter to alliance performance?\u201d, The Academy of Management Journal, Vol. 49, pp. 894\u2010917.","DOI":"10.5465\/amj.2006.22798171"},{"key":"key2022021720165414300_b52","doi-asserted-by":"crossref","unstructured":"Kurland, N.B. (1995), \u201cEthical intentions and the theories of reasoned action and planned behavior\u201d, Journal of Applied Social Psychology, Vol. 25 No. 4, pp. 297\u2010313.","DOI":"10.1111\/j.1559-1816.1995.tb02393.x"},{"key":"key2022021720165414300_b114","doi-asserted-by":"crossref","unstructured":"Lazarus, R S. (1991), Emotion and Adaptation, Oxford University Press, New York, NY.","DOI":"10.1093\/oso\/9780195069945.001.0001"},{"key":"key2022021720165414300_b53","doi-asserted-by":"crossref","unstructured":"Leach, J. (2003), \u201cImproving user security behavior\u201d, Computers & Security, Vol. 22, pp. 685\u201091.","DOI":"10.1016\/S0167-4048(03)00007-5"},{"key":"key2022021720165414300_b55","unstructured":"Leyden, J. (2004), \u201cClueless office workers help spread computer viruses\u201d, The Register, February 6, pp. 17\u201021."},{"key":"key2022021720165414300_b56","doi-asserted-by":"crossref","unstructured":"Lindsey, L.L.M. (2005), \u201cAnticipated guilt as behavioral motivation: an examination of appeals to help unknown others through bone marrow donation\u201d, Human Communication Research, Vol. 31, pp. 453\u201081.","DOI":"10.1093\/hcr\/31.4.453"},{"key":"key2022021720165414300_b57","unstructured":"Losey, R.C. (1998), The Electronic Communications Privacy Act: United States Code, Orlando, FL: The Information Law Web, available at: http:\/\/floridalawfirm.com\/privacy.html (accessed 11 May 2007)."},{"key":"key2022021720165414300_b59","doi-asserted-by":"crossref","unstructured":"McCaul, H.S., Hinsz, V.B. and McCaul, K.D. (1995), \u201cAssessing organizational commitment: an employee's global attitude toward the organization\u201d, Journal of Applied Behavioral Science, Vol. 31, pp. 80\u201090.","DOI":"10.1177\/0021886395311008"},{"key":"key2022021720165414300_b119","doi-asserted-by":"crossref","unstructured":"Marx, R.D. (1982), \u201cRelapse prevention in managerial training: a model for maintenance of behavior change\u201d, Academy of Management Review, Vol. 7, pp. 433\u201041.","DOI":"10.5465\/amr.1982.4285359"},{"key":"key2022021720165414300_b61","unstructured":"Milgram, S. (1983), Obedience to Authority: An Experimental View, Harper\u2010Collins, New York, NY."},{"key":"key2022021720165414300_b64","unstructured":"Mitnick, K. and Simon, W.L. (2002), The Art of Deception: Controlling the Human Element of Security, Wiley, New York, NY."},{"key":"key2022021720165414300_b65","doi-asserted-by":"crossref","unstructured":"Mowday, R.T., Steers, R.T. and Porter, L.W. (1979), \u201cThe measurement of organizational commitment\u201d, Journal of Vocational Behavior, Vol. 14, pp. 224\u201047.","DOI":"10.1016\/0001-8791(79)90072-1"},{"key":"key2022021720165414300_b121","unstructured":"Nunnally, J.C. and Berstein, I.H. (1994), Psychometric Theory, McGraw\u2010Hill, New York, NY."},{"key":"key2022021720165414300_b66","unstructured":"Ong, T.H., Tan, C.P., Tan, Y.T. and Ting, C. (1999), \u201cSNMS \u2013 shadow network management system\u201d, Symposium on Network Computing and Management, Singapore, May 21, pp. 1\u20109."},{"key":"key2022021720165414300_b68","unstructured":"Panko, R.R. (2004), Corporate Computer and Network Security, Pearson\/Prentice\u2010Hall, Upper Saddle River, NJ."},{"key":"key2022021720165414300_b72","doi-asserted-by":"crossref","unstructured":"Petty, R.E., Bri\u00f1ol, P. and Tormala, Z.L. (2002), \u201cThought confidence as a determinant of persuasion: the self\u2010validation hypothesis\u201d, Journal of Personality and Social Psychology, Vol. 82, pp. 722\u201041.","DOI":"10.1037\/0022-3514.82.5.722"},{"key":"key2022021720165414300_b75","doi-asserted-by":"crossref","unstructured":"Pyszczynski, T., Greenberg, J. and Solomon, S. (1997), \u201cWhy do we need what we need? A terror management perspective on the roots of human social motivation\u201d, Psychological Inquiry, Vol. 8, pp. 1\u201020.","DOI":"10.1207\/s15327965pli0801_1"},{"key":"key2022021720165414300_b77","doi-asserted-by":"crossref","unstructured":"Rosenstock, I.M. (1974), \u201cHistorical origins of the health belief model\u201d, Health Education Monograph, Vol. 2, pp. 328\u201035.","DOI":"10.1177\/109019817400200403"},{"key":"key2022021720165414300_b78","doi-asserted-by":"crossref","unstructured":"Ruighaver, A.B., Maynard, S.B. and Chang, S. (2007), \u201cOrganisational security culture: extending the end\u2010user perspective\u201d, Computers and Security, Vol. 26, pp. 56\u201062.","DOI":"10.1016\/j.cose.2006.10.008"},{"key":"key2022021720165414300_b79","unstructured":"Rusch, J.J. (1999), \u201cThe social engineering of internet fraud\u201d, report of the US Department of Justice, INET'99 Conference, available at: www.isoc.org\/inet99\/proceedings\/3g\/3g_2.htm (accessed 2 June 2007)."},{"key":"key2022021720165414300_b81","unstructured":"SANS (2005), The SANS Security Policy Project, SANS, Bethesda, MD."},{"key":"key2022021720165414300_b82","doi-asserted-by":"crossref","unstructured":"Sagie, A. (1998), \u201cEmployee absenteeism, organizational commitment, and job satisfaction: another look\u201d, Journal of Vocational Behavior, Vol. 52, pp. 156\u201071.","DOI":"10.1006\/jvbe.1997.1581"},{"key":"key2022021720165414300_b117","unstructured":"Salant, P. and Dillman, D.A. (1994), How to Conduct Your Survey, John Wiley & Sons, New York, NY."},{"key":"key2022021720165414300_b84","doi-asserted-by":"crossref","unstructured":"Scholz, J.T. (1997), \u201cEnforcement policy and corporate misconduct: the changing perspective of deterrence theory\u201d, Law and Contemporary Problem, No. 60, pp. 153\u2010268.","DOI":"10.2307\/1192014"},{"key":"key2022021720165414300_b87","doi-asserted-by":"crossref","unstructured":"Sherif, J.S., Ayers, R. and Dearmond, T.G. (2003), \u201cIntrusion detection: the art and the practice\u201d, Information Management & Computer Security, Vol. 11 No. 4, pp. 175\u201086.","DOI":"10.1108\/09685220310489544"},{"key":"key2022021720165414300_b115","doi-asserted-by":"crossref","unstructured":"Simpson, P.M., Banerjee, D. and Simpson, C.L. (1994), \u201cSoftlifting: a model of motivating factors\u201d, Journal of Business Ethics, Vol. 13, pp. 431\u20108.","DOI":"10.1007\/BF00881451"},{"key":"key2022021720165414300_b89","unstructured":"Stephenson, K. (2008), The Quantum Theory of Trust: Power, Networks, and the Secret Life of Organizations, Prentice\u2010Hall, New York, NY."},{"key":"key2022021720165414300_b90","unstructured":"Stevens, J. (1990), Intermediate Statistics: A Modern Approach, Lawrence\u2010Erlbaum, Hillsdale, NJ."},{"key":"key2022021720165414300_b91","unstructured":"Stevens, J. (1992), Applied Multivariate Statistics for the Social Sciences, Lawrence Erlbaum, Hillsdale, NJ."},{"key":"key2022021720165414300_b93","doi-asserted-by":"crossref","unstructured":"Straub, D.W. and Nance, W.D. (1990), \u201cDiscovering and disciplining computer abuse in organizations: a field study\u201d, MIS Quarterly, Vol. 14, pp. 45\u201062.","DOI":"10.2307\/249307"},{"key":"key2022021720165414300_b94","doi-asserted-by":"crossref","unstructured":"Straub, D.W. and Welke, R.J. (1998), \u201cCoping with systems risk: security planning models for management decision\u2010making\u201d, MIS Quarterly, Vol. 22, pp. 441\u201069.","DOI":"10.2307\/249551"},{"key":"key2022021720165414300_b92","unstructured":"Straub, D.W., Carlson, P.J. and Jones, E.H. (1993), \u201cDeterring cheating by student programmers: a field experiment in computer security\u201d, Journal of Management Systems, Vol. 5, pp. 33\u201048."},{"key":"key2022021720165414300_b95","unstructured":"Tabachnick, B.G. and Fidell, L.S. (1996), Using Multivariate Statistics, Harper Collins, New York, NY."},{"key":"key2022021720165414300_b97","unstructured":"Tapp, J.L. and Kohlberg, L. (1977), \u201cDeveloping senses of law and legal justice\u201d, in Tapp, J.L. and Levine, F.J. (Eds), Law, Justice, and the Individual in Society: Psychological and Legal Issues, Holt, Rinehart & Winston, New York, NY, pp. 96\u20107."},{"key":"key2022021720165414300_b98","doi-asserted-by":"crossref","unstructured":"Tapp, J.L. and Levine, F.J. (1974), \u201cLegal socialization: strategies for an ethical legality\u201d, Stanford Law Review, Vol. 27, pp. 1\u201072.","DOI":"10.2307\/1227929"},{"key":"key2022021720165414300_b99","doi-asserted-by":"crossref","unstructured":"Theoharidou, M., Kokolakis, S., Karyda, M. and Kiountouzis, E. (2005), \u201cThe insider threat to information systems and the effectiveness of ISO17799\u201d, Computers and Security, Vol. 24, pp. 472\u201084.","DOI":"10.1016\/j.cose.2005.05.002"},{"key":"key2022021720165414300_b102","doi-asserted-by":"crossref","unstructured":"von Solms, B. and von Solms, R. (2004), \u201cThe 10 deadly sins of information security management\u201d, Computers & Security, No. 23, pp. 371\u20106.","DOI":"10.1016\/j.cose.2004.05.002"},{"key":"key2022021720165414300_b106","doi-asserted-by":"crossref","unstructured":"Weatherly, J.N., Miller, K. and McDonald, T.W. (1999), \u201cSocial influence as stimulus control\u201d, Behavior and Social Issues, Vol. 9, pp. 25\u201046.","DOI":"10.5210\/bsi.v9i1.135"},{"key":"key2022021720165414300_b108","doi-asserted-by":"crossref","unstructured":"Workman, M. (2008), \u201cWise\u2010crackers: cognitive and social factors that contribute to information security contravention\u201d, Journal of the American Society for Information Science and Technology, Vol. 59, pp. 662\u201074.","DOI":"10.1002\/asi.20779"},{"key":"key2022021720165414300_b110","doi-asserted-by":"crossref","unstructured":"Workman, M. and Gathegi, J. (2007), \u201cPunishment and ethics deterrents: a study of insider security contravention\u201d, Journal of the American Society of Information Science and Technology, Vol. 58, pp. 212\u201022.","DOI":"10.1002\/asi.20474"},{"key":"key2022021720165414300_b109","doi-asserted-by":"crossref","unstructured":"Workman, M., Bommer, W.H. and Straub, D. (2008), \u201cSecurity lapses and the omission of information security measures: an empirical test of the threat control model\u201d, Journal of Computers in Human Behavior, Vol. 24 No. 6, pp. 2799\u2010816.","DOI":"10.1016\/j.chb.2008.04.005"},{"key":"key2022021720165414300_frd1","unstructured":"Bresz, F.P. (2004), \u201cPeople \u2013 often the weakest link in security, but one of the best places to start\u201d, Journal of Health Care Compliance, July\/August, pp. 57\u201060."},{"key":"key2022021720165414300_frd2","unstructured":"Brill, D.W. and Molton, P. (2006), \u201cEscalation of economic costs, sunk costs, and opportunity costs: a psychological investment perspective\u201d, International Journal of Human Decisioning, Vol. 12, pp. 29\u201038."},{"key":"key2022021720165414300_frd3","doi-asserted-by":"crossref","unstructured":"Brown, R.B. (1996), \u201cOrganizational commitment: clarifying the concept and simplifying the existing construct typology\u201d, Journal of Vocational Behavior, Vol. 49, pp. 230\u201051.","DOI":"10.1006\/jvbe.1996.0042"},{"key":"key2022021720165414300_frd4","unstructured":"Casciaro, T. and Lobo, M.S. (2005), \u201cCompetent jerks, lovable fools, and the formation of social networks\u201d, Harvard Business Review, Vol. 83, pp. 92\u20109."},{"key":"key2022021720165414300_frd5","doi-asserted-by":"crossref","unstructured":"Charbaji, A. and Jannoun, S.E.L. (2005), \u201cIndividuality, willingness to take risk, and use of a personal e\u2010card\u201d, Journal of Managerial Psychology, Vol. 20, pp. 51\u20108.","DOI":"10.1108\/02683940510571649"},{"key":"key2022021720165414300_frd6","doi-asserted-by":"crossref","unstructured":"Chen, Y\u2010H. and Barnes, S. (2007), \u201cInitial trust and online buyer behavior\u201d, Industrial Management & Data Systems, Vol. 107, pp. 21\u201036.","DOI":"10.1108\/02635570710719034"},{"key":"key2022021720165414300_frd7","doi-asserted-by":"crossref","unstructured":"Dotterweich, D.P. and Collins, K.S. (2006), \u201cThe practically of super bowl advertising for new products and companies\u201d, Journal of Promotion Management, Vol. 11, pp. 19\u201031.","DOI":"10.1300\/J057v11n04_03"},{"key":"key2022021720165414300_frd8","unstructured":"Dowd, E.T. and Seibel, C.A. (1990), \u201cA cognitive theory of resistance and reactance: implications for treatment\u201d, Journal of Mental Health Counseling, Vol. 12, pp. 458\u201069."},{"key":"key2022021720165414300_frd9","doi-asserted-by":"crossref","unstructured":"Fennis, B.M., Das, E. and Pruyn, A.T.H. (2006), \u201cInterpersonal communication and compliance: the disrupt\u2010then\u2010reframe technique in dyadic influence settings\u201d, Communication Research, Vol. 33 No. 2, pp. 136\u201051.","DOI":"10.1177\/0093650205285367"},{"key":"key2022021720165414300_frd10","unstructured":"Gass, R.H. and Seiter, J.S. (1999), Persuasion, Social Influence, and Compliance Gaining, Allyn\u2010Bacon, Needham Heights, MA."},{"key":"key2022021720165414300_frd11","unstructured":"Giles, H. and Wiemann, J.M. (1987), \u201cLanguage, social comparison and power\u201d, in Berger, C.R. and Chaffee, S.H. (Eds), The Handbook of Communication Science, Sage, Newbury Park, CA, pp. 350\u201084."},{"key":"key2022021720165414300_frd12","doi-asserted-by":"crossref","unstructured":"Guadagno, R.E. and Cialdini, R.B. (2002), \u201cOn\u2010line persuasion: an examination of differences in computer\u2010mediated interpersonal influence\u201d, Group Dynamics: Theory, Research and Practice, Vol. 6, pp. 38\u201051.","DOI":"10.1037\/1089-2699.6.1.38"},{"key":"key2022021720165414300_frd13","doi-asserted-by":"crossref","unstructured":"Gundlach, G.T., Achrol, R.S. and Mentzer, J.T. (1995), \u201cThe structure of commitment in exchange\u201d, Journal of Marketing, Vol. 59, pp. 78\u201092.","DOI":"10.1177\/002224299505900107"},{"key":"key2022021720165414300_frd14","doi-asserted-by":"crossref","unstructured":"Horai, J., Naccari, N. and Fatoullah, E. (1974), \u201cThe effects of expertise and physical attractiveness upon opinion agreement and liking\u201d, Sociometry, Vol. 37, pp. 601\u20106.","DOI":"10.2307\/2786431"},{"key":"key2022021720165414300_frd15","unstructured":"International Federation of Accountants (2006), Intellectual Assets and Value Creation: Implications for Corporate Reporting, International Federation of Accountants, Paris, available at: www.oecd.org\/dataoecd\/2\/40\/37811196.pdf (accessed 14 June 2008)."},{"key":"key2022021720165414300_frd16","doi-asserted-by":"crossref","unstructured":"Janoff\u2010Bulman, R. and Frieze, I.H. (1983), \u201cA theoretical perspective for understanding reactions to victimization\u201d, Journal of Social Issues, Vol. 39, pp. 1\u201017.","DOI":"10.1111\/j.1540-4560.1983.tb00138.x"},{"key":"key2022021720165414300_frd17","doi-asserted-by":"crossref","unstructured":"Josephs, R.A., Larrick, R.P., Steele, M. and Nisbett, R.E. (1992), \u201cProtecting the self from the negative consequences of risky decisions\u201d, Journal of Personality and Social Psychology, Vol. 62, pp. 26\u201037.","DOI":"10.1037\/0022-3514.62.1.26"},{"key":"key2022021720165414300_frd18","unstructured":"Kelley, H.H. and Thibaut, J. (1978), Interpersonal Relations: A Theory of Interdependence, Wiley, New York, NY."},{"key":"key2022021720165414300_frd19","unstructured":"Komito, L. (1994), \u201cCommunities of practice and communities of trust: global culture and information technology\u201d, Journal of Anthropology, Vol. 4, pp. 33\u201045."},{"key":"key2022021720165414300_frd20","doi-asserted-by":"crossref","unstructured":"Lejeune, R. and Alex, N. (1973), \u201cOn being mugged: the event and its aftermath\u201d, Urban Life and Culture, Vol. 2, pp. 259\u201087.","DOI":"10.1177\/089124167300200301"},{"key":"key2022021720165414300_frd21","doi-asserted-by":"crossref","unstructured":"Lynn, M. (1992), \u201cScarcity's enhancement of desirability\u201d, Basic and Applied Social Psychology, Vol. 13, pp. 67\u201078.","DOI":"10.1207\/s15324834basp1301_6"},{"key":"key2022021720165414300_frd22","doi-asserted-by":"crossref","unstructured":"Melamed, Y., Szor, H., Barak, Y. and Elizur, A. (1998), \u201cHoarding: what does it mean?\u201d, Comprehensive Psychiatry, Vol. 39, pp. 400\u20102.","DOI":"10.1016\/S0010-440X(98)90054-2"},{"key":"key2022021720165414300_frd23","unstructured":"Miller, K. (2005), Communication Theories: Perspectives, Processes, and Contexts, McGraw\u2010Hill, New York, NY."},{"key":"key2022021720165414300_frd24","doi-asserted-by":"crossref","unstructured":"Milne, S., Sheeran, P. and Orbell, S. (2000), \u201cPrediction and intervention in health\u2010related behaviour: a meta\u2010analytic review of protection motivation theory\u201d, Journal of Applied Social Psychology, No. 30, pp. 106\u201043.","DOI":"10.1111\/j.1559-1816.2000.tb02308.x"},{"key":"key2022021720165414300_frd25","unstructured":"Panko, R., DeFries, J.C. and McClearn, G.E. (1990), Behavioral Genetics, W.H. Freeman, New York, NY."},{"key":"key2022021720165414300_frd26","doi-asserted-by":"crossref","unstructured":"Pechmann, C., Zhao, G., Goldberg, M. and Reibling, E.T. (2003), \u201cWhat to convey in antismoking advertisements of adolescents: the use of protection motivation theory to identify effective message themes\u201d, Journal of Marketing, Vol. 67 No. 2, pp. 1\u201018.","DOI":"10.1509\/jmkg.67.2.1.18607"},{"key":"key2022021720165414300_frd27","doi-asserted-by":"crossref","unstructured":"Pennebaker, J.W. and Sanders, D.Y. (1976), \u201cAmerican graffiti: effects of authority and reactance arousal\u201d, Personality and Social Psychology Bulletin, Vol. 2, pp. 264\u20107.","DOI":"10.1177\/014616727600200325"},{"key":"key2022021720165414300_frd28","doi-asserted-by":"crossref","unstructured":"Pennington, N. and Hastie, R. (1986), \u201cEvidence evaluation in complex decision making\u201d, Journal of Personality and Social Psychology, Vol. 51, pp. 242\u201058.","DOI":"10.1037\/0022-3514.51.2.242"},{"key":"key2022021720165414300_frd29","unstructured":"Petty, R.E. and Cacioppo, J.T. (1986), Communication and Persuasion: Central and Peripheral Routes to Attitude Change, Springer, New York, NY."},{"key":"key2022021720165414300_frd30","doi-asserted-by":"crossref","unstructured":"Petty, R.E., Cacioppo, J.T. and Schumann, D.W. (1983), \u201cCentral and peripheral routes to advertising effectiveness: the moderating role of involvement\u201d, Journal of Consumer Research, Vol. 10, pp. 135\u201046.","DOI":"10.1086\/208954"},{"key":"key2022021720165414300_frd31","doi-asserted-by":"crossref","unstructured":"Roe\u2010Berning, S. and Straker, G. (1997), \u201cThe association between illusions of invulnerability and exposure to trauma\u201d, Journal of Traumatic Stress, Vol. 10, pp. 319\u201027.","DOI":"10.1002\/jts.2490100212"},{"key":"key2022021720165414300_frd32","doi-asserted-by":"crossref","unstructured":"Rutte, C.G., Wilke, H.A.M. and Messick, D.M. (1987), \u201cScarcity or abundance caused by people or the environment as determinants of behavior in the resource dilemma\u201d, Journal of Experimental Social Psychology, Vol. 23, pp. 208\u201016.","DOI":"10.1016\/0022-1031(87)90032-1"},{"key":"key2022021720165414300_frd33","unstructured":"Sasse, M.A., Brostoff, S. and Weirich, D. (2004), \u201cTransforming the weakest link \u2013 a human\/computer interaction approach to usable and effective security\u201d, BT Technology Journal, Vol. 19 No. 3, pp. 122\u201031."},{"key":"key2022021720165414300_frd34","doi-asserted-by":"crossref","unstructured":"Schumann, D.W., Hathcote, J.M. and West, S. (1991), \u201cCorporate advertising in America: a review of published studies on use, measurement, and effectiveness\u201d, Journal of Advertising, September, pp. 35\u201055.","DOI":"10.1080\/00913367.1991.10673346"},{"key":"key2022021720165414300_frd35","unstructured":"Severin, W.J. and Tankard, J.W. (1997), Communication Theories: Origins, Methods, and Uses in the Mass Media, Addison\u2010Wesley, New York, NY."},{"key":"key2022021720165414300_frd36","unstructured":"Shreve, M. (2004), \u201cThe office now a major place for identity theft\u201d, Crains, September, pp. 1\u20104."},{"key":"key2022021720165414300_frd37","unstructured":"Tajfel, H. and Turner, J.C. (1986), \u201cThe social identity theory of inter\u2010group behavior\u201d, in Worchel, S. and Austin, L.W. (Eds), Psychology of Intergroup Relations, Nelson\u2010Hall, Chicago, IL."},{"key":"key2022021720165414300_frd38","unstructured":"Thomas, T.M. (2004), Network Security First\u2010step, Cisco Press, Indianapolis, IN."},{"key":"key2022021720165414300_frd39","unstructured":"US Department of Justice (2004), \u201cViolation of 18 USC. Gaining unauthorized access\u201d, Information Security Report of the GAO, Vol. 17."},{"key":"key2022021720165414300_frd40","doi-asserted-by":"crossref","unstructured":"Wakefield, R.L. and Whitten, D. (2006), \u201cExamining user perceptions of third\u2010party organization credibility and trust in an e\u2010retailer\u201d, Journal of Organizational and End User Computing, Vol. 18, pp. 1\u201019.","DOI":"10.4018\/joeuc.2006040101"},{"key":"key2022021720165414300_frd41","doi-asserted-by":"crossref","unstructured":"Walczuch, R. and Lundgren, H. (2004), \u201cPsychological antecedents of institution\u2010based consumer trust in e\u2010retailing\u201d, Information & Management, Vol. 42 No. 1, pp. 159\u201077.","DOI":"10.1016\/j.im.2003.12.009"},{"key":"key2022021720165414300_frd42","doi-asserted-by":"crossref","unstructured":"Wang, Y.D. and Emurian, H.H. (2005), \u201cAn overview of online trust: concepts, elements, and implications\u201d, Journal of Computers in Human Behavior, Vol. 21, pp. 105\u201025.","DOI":"10.1016\/j.chb.2003.11.008"},{"key":"key2022021720165414300_frd43","doi-asserted-by":"crossref","unstructured":"Wilson, R. (2004), \u201cUnderstanding the offender\/environment dynamic for computer crimes: assessing the feasibility of applying criminology theory to the IS security context\u201d, Proceedings from the 37th Hawaii International Conference on System Sciences, pp. 1\u201010.","DOI":"10.1109\/HICSS.2004.1265446"},{"key":"key2022021720165414300_frd44","doi-asserted-by":"crossref","unstructured":"Yakov, B., Shankar, V., Sultan, F. and Urban, G.L. (2005), \u201cAre the drivers and role of online trust the same for all web sites and consumers? A large\u2010scale exploratory empirical study\u201d, Journal of Marketing, Vol. 69, pp. 133\u201052.","DOI":"10.1509\/jmkg.2005.69.4.133"},{"key":"key2022021720165414300_frd45","doi-asserted-by":"crossref","unstructured":"Yang, S., Hung, W., Sung, K. and Farn, C. (2006), \u201cInvestigating initial trust toward e\u2010tailers from the elaboration likelihood model perspective\u201d, Psychology & Marketing, Vol. 23, pp. 429\u201045.","DOI":"10.1002\/mar.20120"}],"container-title":["Information Management &amp; Computer Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/www.emeraldinsight.com\/doi\/full-xml\/10.1108\/09685220810920549","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/09685220810920549\/full\/xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/09685220810920549\/full\/html","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,25]],"date-time":"2025-07-25T00:09:07Z","timestamp":1753402147000},"score":1,"resource":{"primary":{"URL":"http:\/\/www.emerald.com\/ics\/article\/16\/5\/463-483\/185642"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008,11,21]]},"references-count":123,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2008,11,21]]}},"alternative-id":["10.1108\/09685220810920549"],"URL":"https:\/\/doi.org\/10.1108\/09685220810920549","relation":{},"ISSN":["0968-5227"],"issn-type":[{"value":"0968-5227","type":"print"}],"subject":[],"published":{"date-parts":[[2008,11,21]]}}}