Browsing by Subject "uhan arviointi"

Aims. The role of a human as an IT user has become the center of the information security debate as one user can have a significant role to the organization's information security. The user can also behave consciously carefully. Information security conscious care behavior (ISCCB) means that a user makes consciously better and safer choices when using IT. Past research has often explained information security behavior by attitude, subjective norms, self-efficacy and threat appraisal. In this dissertation the aim was to discover whether ISCCB can be predicted from these factors emerged from previous research. Further, we were interested whether there are differences between women and men, between students from different organizational background and between light and heavy Internet users in security behavior and the factors related to it. Methods. There were 402 participants altogether in this study, from University of Helsinki (UH) and from National Defence University (NDU). The data was gathered from questionnaires. To explore the relationships between ISCCB and other variables, we used structural equation modeling. Group differences were examined by multivariate analysis of covariance. Results and conclusions. The results were supporting previous research about the relationship between the information security behavior, attitude and subjective norms. Self-efficacy or threat appraisal did not predict ISCCB but there were differences in them between men and women. NDF students behaved and thought more safely than UH students. There was no difference between light and heavy users in any of the factor related to the ISCCB nor the behavior itself. According to these results it is reasonable to improve organizational climate and try to make users to create more favorable attitudes towards information security behavior to make them also behave in a more secure manner.