Social-cognitive mechanisms and counterproductive computer security behaviors (CCSB): an analysis of links

Abstract

Very little research has been carried out to determine the links between social-cognitive mechanisms and employees' counterproductive computer security behaviors (CCSB). Accordingly, we aim to contribute to the literature in this area. A research model that drew from the social cognitive theory (SCT) was proposed and tested with data collected from professionals employed in Canadian organizations. Data analysis using the partial least squares (PLS) technique confirmed that outcome expectations (personal) and selfregulation were significant factors that impacted employees' decisions to engage or not in CCSB. The other considered SCT factors (i.e., observational learning, self-efficacy, and outcome expectations (organizational) in our study yielded insignificant results. The study's implications for practice and research are discussed.