ERIC Number: ED566016
Record Type: Non-Journal
Publication Date: 2014
Pages: 251
Abstractor: As Provided
ISBN: 978-1-3036-9795-1
ISSN: N/A
EISSN: N/A
Available Date: N/A
Information Technology Security and Human Risk: Exploring Factors of Unintended Insider Threat and Organizational Resilience
Thompson, Eleanor Elizabeth
ProQuest LLC, Ph.D. Dissertation, Walden University
That organizations face threats to the security of their computer systems from external hackers is well documented. Intentional or unintentional behaviors by organizational insiders can severely compromise computer security as well. Less is known, however, about the nature of this threat from insiders. The purpose of this study was to bridge this gap in the literature by investigating the phenomenon of unintended insider threat to information technology security. The conceptual framework for this study was Loch, Carr, and Warkentin's four dimensions of information system security--sources, perpetrators, intent, and consequences. Research questions focused on the identification of insider threats, factors contributing to unintended threat, the relationship of these factors to organizational vulnerability and potential consequences, and ways in which managers and information technology specialists might mitigate the risks from insider threat. Using grounded theory methodology, a purposeful sample of 10 U.S. Coast Guard information technology security experts was interviewed and the data analyzed using the constant comparative method. Findings from the study informed an expansion of the Loch, Carr, and Warkentin model of information system security to include the origin of the threat, sanctions for security violations, and resource loss. The implications for social change include sharing this knowledge within government, industry, and academia to improve organizational resilience to insider threats, thereby enhancing the protection of critical computer infrastructure within the U.S. and the world at large. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://www.proquest.com.bibliotheek.ehb.be/en-US/products/dissertations/individuals.shtml.]
Descriptors: Information Technology, Information Security, Risk Management, Computers, Identification, Grounded Theory, Expertise, Interviews, Data Analysis, Models
ProQuest LLC. 789 East Eisenhower Parkway, P.O. Box 1346, Ann Arbor, MI 48106. Tel: 800-521-0600; Web site: http://www.proquest.com.bibliotheek.ehb.be/en-US/products/dissertations/individuals.shtml
Publication Type: Dissertations/Theses - Doctoral Dissertations
Education Level: N/A
Audience: N/A
Language: English
Sponsor: N/A
Authoring Institution: N/A
Grant or Contract Numbers: N/A
Author Affiliations: N/A