The Impact of Challenge Information Security Stress on Information Security Policy Compliance: The Mediating Roles of Emotions

References

• Willison R, Warkentin M. Beyond deterrence: an expanded view of employee computer abuse. MIS Q. 2013;37(1):1–20. doi:10.25300/MISQ/2013/37.1.01
   Web of Science ®Google Scholar
• Cram WA, Proudfoot JG, D’Arcy J. Organizational information security policies: a review and research framework. Eur J Inform Syst. 2017;26(6):605–641. doi:10.1057/s41303-017-0059-9
   Web of Science ®Google Scholar
• D’Arcy J, Herath T. A review and analysis of deterrence theory in the IS security literature: making sense of the disparate findings. Eur J Inform Syst. 2011;20(6):643–658. doi:10.1057/ejis.2011.23
   Web of Science ®Google Scholar
• Guan BW, Hsu CR. The role of abusive supervision and organizational commitment on employees’ information security policy noncompliance intention. Internet Res. 2020;30(5):1383–1405. doi:10.1108/INTR-06-2019-0260
   Web of Science ®Google Scholar
• Zhen J, Xie ZX, Dong KX, Chen L. Impact of negative emotions on violations of information security policy and possible mitigations. Behav Inform Technol. 2021;1921029. doi:10.1080/0144929X.2021.1921029
   Web of Science ®Google Scholar
• Ifinedo P. Information systems security policy compliance: an empirical study of the effects of socialisation, influence, and cognition. Inform Manag. 2014;51(1):69–79. doi:10.1016/j.im.2013.10.001
   Web of Science ®Google Scholar
• Moody GD, Siponen M, Pahnila S. Toward a unified model of information security policy compliance. MIS Q. 2018;42(1):285–311. doi:10.25300/MISQ/2018/13853
   Web of Science ®Google Scholar
• Pham H-C, El-den J, Richardson J. Stress-based security compliance model – an exploratory study. Inform Comput Secur. 2016;24(4):326–347. doi:10.1108/ICS-10-2014-0067
   Web of Science ®Google Scholar
• Hwang I, Cha O. Examining technostress creators and role stress as potential threats to employees’ information security compliance. Comput Hum Behav. 2018;81:282–293. doi:10.1016/j.chb.2017.12.022
   Web of Science ®Google Scholar
• Lee C, Lee CC, Kim S. Understanding information security stress: focusing on the type of information security compliance activity. Comput Secur. 2016;59:60–70. doi:10.1016/j.cose.2016.02.004
   Web of Science ®Google Scholar
• Burns AJ, Posey C, Roberts TL, Lowry PB. Examining the relationship of organizational insiders’ psychological capital with information security threat and coping appraisals. Comput Hum Behav. 2017;68:190–209. doi:10.1016/j.chb.2016.11.018
   Web of Science ®Google Scholar
• Cavanaugh MA, Boswell WR, Roehling MV, Boudreau JW. An empirical examination of self-reported work stress among U.S. managers. J Appl Psychol. 2000;85(1):65–74. doi:10.1037/0021-9010.85.1.65
   PubMed Web of Science ®Google Scholar
• Chen XF, Wu DZ, Chen LQ, Teng JKL. Sanction severity and employees’ information security policy compliance: investigating mediating, moderating, and control variables. Inform Manag. 2018;55(8):1049–1060. doi:10.1016/j.im.2018.05.011
   Web of Science ®Google Scholar
• Boss SR, Galletta DF, Lowry PB, Moody GD, Polak P. What do systems users have to fear? Using fear appeals to engender threats and fear that motivate protective security behaviors. MIS Q. 2015;39(4):837–864. doi:10.25300/MISQ/2015/39.4.5
   Web of Science ®Google Scholar
• Ashkanasy NM, Catherine SD. Emotion in the workplace: the new challenge for managers. Acad Manag Exec. 2002;16(1):76–86. doi:10.5465/AME.2002.6640191
   Web of Science ®Google Scholar
• Weiss HM, Cropanzano R. Affective events theory: a theoretical discussion of the structure, causes and consequences of affective experiences at work. In: Research in Organizational Behavior: An Annual Series of Analytical Essays and Critical Reviews. Vol. 18. US: Elsevier Science/JAI Press; 1996:1–74.
   Google Scholar
• Haque A. Strategic HRM and organisational performance: does turnover intention matter? Int J Organ Anal. 2021;29(3):656–681. doi:10.1108/IJOA-09-2019-1877
   Web of Science ®Google Scholar
• Sobhani FA, Haque A, Rahman S. Socially responsible HRM, employee attitude, and bank reputation: the rise of CSR in Bangladesh. Sustainability. 2021;13(5):2753. doi:10.3390/su13052753
   Web of Science ®Google Scholar
• Selye H. History and present status of the stress concept. In: Alan M, Richard SL, editors. Stress and Coping: An Anthology. Columbia University Press; 1991:21–35. doi:10.7312/mona92982-007
   Google Scholar
• Jannesari MT, Sullivan SE. Leaving on a jet plane? The effect of challenge–hindrance stressors, emotional resilience and cultural novelty on self-initiated expatriates’ decision to exit China. Pers Rev. 2021;51(1):118–136. doi:10.1108/pr-05-2020-0362
   Web of Science ®Google Scholar
• Podsakoff NP, LePine JA, LePine MA. Differential challenge stressor-hindrance stressor relationships with job attitudes, turnover intentions, turnover, and withdrawal behavior: a meta-analysis. J Appl Psychol. 2007;92(2):438–454. doi:10.1037/0021-9010.92.2.438
   PubMed Web of Science ®Google Scholar
• Lepine JA, Podsakoff NP, Lepine MA. A meta-analytic test of the challenge stressor–hindrance stressor framework: an explanation for inconsistent relationships among stressors and performance. Acad Manag J. 2005;48(5):764–775. doi:10.5465/AMJ.2005.18803921
   Web of Science ®Google Scholar
• Mazzola JJ, Disselhorst R. Should we be “challenging” employees?: a critical review and meta‐analysis of the challenge‐hindrance model of stress. J Organ Behav. 2019;40(8):949–961. doi:10.1002/job.2412
   Web of Science ®Google Scholar
• Kern M, Heissler C, Zapf D. Social job stressors can foster employee well-being: introducing the concept of social challenge stressors. J Bus Psychol. 2020;36(5):771–792. doi:10.1007/s10869-020-09702-7
   Web of Science ®Google Scholar
• French KA, Allen TD, Henderson TG. Challenge and hindrance stressors and metabolic risk factors. J Occup Health Psychol. 2019;24(3):307–321. doi:10.1037/ocp0000138
   PubMed Web of Science ®Google Scholar
• Luo MM, Chea S. Cognitive appraisal of incident handling, affects, and post-adoption behaviors: a test of affective events theory. Int J Inform Manage. 2018;40:120–131. doi:10.1016/j.ijinfomgt.2018.01.014
   Web of Science ®Google Scholar
• Basch J, Fisher C. Affective events–emotions matrix: a classification of work events and associated emotions. Sch Bus Discuss Pap. 1998;65:36–48.
   Google Scholar
• Junça-Silva A, Pombeira C, Caetano A. Testing the affective events theory: the mediating role of affect and the moderating role of mindfulness. Appl Cognit Psychol. 2021;35(4):1075–1081. doi:10.1002/acp.3843
   Web of Science ®Google Scholar
• Itzkovich Y, Heilbrunn S, Dolev N. Drivers of intrapreneurship: an affective events theory viewpoint. Pers Rev. 2021. doi:10.1108/PR-09-2019-0483
   Web of Science ®Google Scholar
• D’Arcy J, Teh PL. Predicting employee information security policy compliance on a daily basis: the interplay of security-related stress, emotions, and neutralization. Inform Manag. 2019;56(7):103151. doi:10.1016/j.im.2019.02.006
   Web of Science ®Google Scholar
• Ormond D, Warkentin M, Crossler RE. Integrating cognition with an affective lens to better understand information security policy compliance. J Assoc Inf Syst. 2019;20(12):1794–1843. doi:10.17705/1jais.00586
   Web of Science ®Google Scholar
• Farshadkhah S, Van Slyke C, Fuller B. Onlooker effect and affective responses in information security violation mitigation. Comput Secur. 2021;100:102082. doi:10.1016/j.cose.2020.102082
   Web of Science ®Google Scholar
• Tarafdar M, Cooper CL, Stich JF. The technostress trifecta-techno eustress, techno distress and design: theoretical directions and an agenda for research. Inform Syst J. 2019;29(1):6–42. doi:10.1111/isj.12169
   Web of Science ®Google Scholar
• Niemimaa E, Niemimaa M. Information systems security policy implementation in practice: from best practices to situated practices. Eur J Inform Syst. 2017;26(1):1–20. doi:10.1057/s41303-016-0025-y
   Web of Science ®Google Scholar
• Furnell S, Clarke N. Power to the people? The evolving recognition of human aspects of security. Comput Secur. 2012;31(8):983–988. doi:10.1016/j.cose.2012.08.004
   Web of Science ®Google Scholar
• Safa NS, Sookhak M, Von Solms R, Furnell S, Ghani NA, Herawan T. Information security conscious care behaviour formation in organizations. Comput Secur. 2015;53:65–78. doi:10.1016/j.cose.2015.05.012
   Web of Science ®Google Scholar
• Ali RF, Dominic PDD, Ali SEA, Rehman M, Sohail A. Information security behavior and information security policy compliance: a systematic literature review for identifying the transformation process from noncompliance to compliance. Appl Sci. 2021;11(8):3383. doi:10.3390/app11083383
   Google Scholar
• Dong K, Ali RF, Dominic PDD, Ali SEA. The effect of organizational information security climate on information security policy compliance: the mediating effect of social bonding towards healthcare nurses. Sustainability. 2021;13(5):2800. doi:10.3390/su13052800
   Web of Science ®Google Scholar
• Son JY, Park J. Procedural justice to enhance compliance with non-work-related computing (NWRC) rules: its determinants and interaction with privacy concerns. Int J Inform Manage. 2016;36(3):309–321. doi:10.1016/j.ijinfomgt.2015.12.005
   Web of Science ®Google Scholar
• Yazdanmehr A, Wang JG. Employees’ information security policy compliance: a norm activation perspective. Decis Support Syst. 2016;92:36–46. doi:10.1016/j.dss.2016.09.009
   Web of Science ®Google Scholar
• Morrison EW, Robinson SL. When employees feel betrayed: a model of how psychological contract violation develops. Acad Manag Rev. 1997;22(1):226–256. doi:10.2307/259230
   Web of Science ®Google Scholar
• Lee Y, Kozar KA. An empirical investigation of anti-spyware software adoption: a multitheoretical perspective. Inform Manage. 2008;45(2):109–119. doi:10.1016/j.im.2008.01.002
   Web of Science ®Google Scholar
• Spector PE, Fox S. An emotion-centered model of voluntary work behavior: some parallels between counterproductive work behavior and organizational citizenship behavior. Hum Resour Manag Rev. 2002;12(2):269–292. doi:10.1016/S1053-4822(02)00049-9
   Google Scholar
• Baskerville R, Hee Park E, Kim J. An emote opportunity model of computer abuse. Inform Technol People. 2014;27(2):155–181. doi:10.1108/ITP-11-2011-0068
   Web of Science ®Google Scholar
• Kim J, Park EH, Baskerville RL. A model of emotion and computer abuse. Inform Manag. 2016;53(1):91–108. doi:10.1016/j.im.2015.09.003
   Web of Science ®Google Scholar
• Siponen M, Vance A. Neutralization: new insights into the problem of employee information systems security policy violations. MIS Q. 2010;34(3):487–502. doi:10.2307/25750688
   Web of Science ®Google Scholar
• Watson D, Tellegen A. Toward a consensual structure of mood. Psychol Bull. 1985;98(2):219–235. doi:10.1037/0033-2909.98.2.219
   PubMed Web of Science ®Google Scholar
• Rodell JB, Judge TA. Can “good” stressors spark “bad” behaviors? The mediating role of emotions in links of challenge and hindrance stressors with citizenship and counterproductive behaviors. J Appl Psychol. 2009;94(6):1438–1451. doi:10.1037/a0016752
   PubMed Web of Science ®Google Scholar
• Fuller JA, Stanton JM, Fisher GG, Spitzmüller C, Russell SS, Smith PC. A lengthy look at the daily grind: time series analysis of events, mood, stress, and satisfaction. J Appl Psychol. 2003;88(6):1019–1033. doi:10.1037/0021-9010.88.6.1019
   PubMed Web of Science ®Google Scholar
• Stacey P, Taylor R, Olowosule O, Spanaki K. Emotional reactions and coping responses of employees to a cyber-attack: a case study. Int J Inform Manag. 2021;58:102298. doi:10.1016/j.ijinfomgt.2020.102298
   Web of Science ®Google Scholar
• Isen AM, Patrick R. The effect of positive feelings on risk taking: when the chips are down. Organ Behav Hum Perform. 1983;31(2):194–202. doi:10.1016/0030-5073(83)90120-4
   Web of Science ®Google Scholar
• Hermans D, De Houwer J, Eelen P. A time course analysis of the affective priming effect. Cognit Emotion. 2001;15(2):143–165. doi:10.1080/0269993004200033
   Web of Science ®Google Scholar
• Mendhurwar S, Mishra R. Integration of social and IoT technologies: architectural framework for digital transformation and cyber security challenges. Enterp Inform Syst. 2021;15(4):565–584. doi:10.1080/17517575.2019.1600041
   Web of Science ®Google Scholar
• Zhen J, Xie ZX, Dong KX. Positive emotions and employees’ protection-motivated behaviours: a moderated mediation model. J Bus Econ Manag. 2020;21(5):1466–1485. doi:10.3846/jbem.2020.13169
   Web of Science ®Google Scholar
• Robinson MD, Clore GL. Episodic and semantic knowledge in emotional self-report: evidence for two judgment processes. J Pers Soc Psychol. 2002;83(1):198–215. doi:10.1037/0022-3514.83.1.198
   PubMed Web of Science ®Google Scholar
• Greenberg J, Tomlinson EC. Situated experiments in organizations: transplanting the lab to the field. J Manag. 2004;30(5):703–724. doi:10.1016/j.jm.2003.11.001
   Web of Science ®Google Scholar
• Ayyagari R, Grover V, Purvis R. Technostress: technological antecedents and implications. MIS Q. 2011;35(4):831–858. doi:10.2307/41409963
   Web of Science ®Google Scholar
• Tyler TR, Blader SL. Can businesses effectively regulate employee conduct? The antecedents of rule following in work settings. Acad Manag J. 2005;48(6):1143–1158. doi:10.5465/AMJ.2005.19573114
   Web of Science ®Google Scholar
• Watson D, Clark LA, Tellegen A. Development and validation of brief measures of positive and negative affect: the PANAS scales. J Pers Soc Psychol. 1988;54(6):1063–1070. doi:10.1037/0022-3514.54.6.1063
   PubMed Web of Science ®Google Scholar
• Podsakoff PM, MacKenzie SB, Lee JY, Podsakoff NP. Common method biases in behavioral research: a critical review of the literature and recommended remedies. J Appl Psychol. 2003;88(5):879–903. doi:10.1037/0021-9010.88.5.879
   PubMed Web of Science ®Google Scholar
• Preacher KJ, Hayes AF. Asymptotic and resampling strategies for assessing and comparing indirect effects in multiple mediator models. Behav Res Methods. 2008;40(3):879–891. doi:10.3758/BRM.40.3.879
   PubMed Web of Science ®Google Scholar
• Preacher KJ, Hayes AF. SPSS and SAS procedures for estimating indirect effects in simple mediation models. Behav Res Methods Instrum Comput. 2004;36(4):717–731. doi:10.3758/bf03206553
   PubMedGoogle Scholar
• Johnson EJ, Tversky A. Affect, generalization, and the perception of risk. J Pers Soc Psychol. 1983;45(1):20–31. doi:10.1037/0022-3514.45.1.20
   Web of Science ®Google Scholar