dc.contributor.author | Kearney, Wayne D. | |
dc.contributor.author | Kruger, Hennie A. | |
dc.date.accessioned | 2017-01-23T13:54:29Z | |
dc.date.available | 2017-01-23T13:54:29Z | |
dc.date.issued | 2016 | |
dc.identifier.citation | Kearney, W.D. & Kruger, H.A. 2016. Theorising on risk homeostasis in the context of information security behaviour. Information & computer security, 24(5):496-513. [https://doi.org/10.1108/ICS-04-2016-0029] | en_US |
dc.identifier.issn | 2056-4961 | |
dc.identifier.uri | http://hdl.handle.net/10394/19857 | |
dc.identifier.uri | http://www.emeraldinsight.com/doi/full/10.1108/ICS-04-2016-0029 | |
dc.identifier.uri | https://doi.org/10.1108/ICS-04-2016-0029 | |
dc.description.abstract | Purpose – The purpose of this paper is to discuss and theorise on the appropriateness and potential
impact of risk homeostasis in the context of information security.
Design/methodology/approach – The discussion is mainly based on a literature survey backed up
by illustrative empirical examples.
Findings – Risk homeostasis in the context of information security is an under-explored topic. The
principles, assumptions and methodology of a risk homeostasis framework offer new insights and
knowledge to explain and predict contradictory human behaviour in information security.
Practical implications – The paper shows that explanations for contradictory human behaviour
(e.g. the privacy paradox) would gain from considering risk homeostasis as an information security risk
management model. The ideas discussed open up the prospect to theorise on risk homeostasis as a
framework in information security and should form a basis for further research and practical
implementations. On a more practical level, it offers decision makers useful information and new
insights that could be advantageous in a strategic security planning process.
Originality/value – This is the first systematic comprehensive review of risk homeostasis in the
context of information security behaviour and readers of the paper will find new theories, guidelines and
insights on risk homeostasis | en_US |
dc.language.iso | en | en_US |
dc.publisher | Emerald | en_US |
dc.subject | Information security | en_US |
dc.subject | Behavioural frameworks | en_US |
dc.subject | Information risk | en_US |
dc.subject | Information security behaviour | en_US |
dc.subject | Risk homeostasis | en_US |
dc.subject | Security fatigue | en_US |
dc.title | Theorising on risk homeostasis in the context of information security behaviour | en_US |
dc.type | Article | en_US |
dc.contributor.researchID | 12066621 - Kruger, Hendrik Abraham | |
dc.contributor.researchID | 20020066 - Kearney, Wayne Derek | |