To read this content please select one of the options below:

Identifying and predicting the factors affecting end-users’ risk-taking behavior

Manal Alohali (Center for Security, Communications and Network Research, Plymouth University, Plymouth, UK and College of Computer and Information Sciences, Princess Nourah Bint Abdulrahman University, Riyadh, Saudi Arabia)
Nathan Clarke (Center for Security, Communications and Network Research, Plymouth University, Plymouth, UK and Security Research Institute, Edith Cowan University, Western Australia, Australia)
Fudong Li (Portsmouth Business School, Communications and Network Research, Portsmouth, UK)
Steven Furnell (Center for Security, Communications and Network Research, Plymouth University, Plymouth, UK and Security Research Institute, Edith Cowan University, Western Australia, Australia)

Information and Computer Security

ISSN: 2056-4961

Article publication date: 9 July 2018

1027

Abstract

Purpose

The end-user has frequently been identified as the weakest link; however, motivated by the fact that different users react differently to the same stimuli, identifying the reasons behind variations in security behavior and why certain users could be “at risk” more than others is a step toward protecting and defending users against security attacks. This paper aims to explore the effect of personality trait variations (through the Big Five Inventory [BFI]) on users’ risk level of their intended security behaviors. In addition, age, gender, service usage and information technology (IT) proficiency are analyzed to identify what role and impact they have on behavior.

Design/methodology/approach

The authors developed a quantitative-oriented survey that was implemented online. The bi-variate Pearson two-tailed correlation was used to analyze survey responses.

Findings

The results obtained by analyzing 538 survey responses suggest that personality traits do play a significant role in affecting users’ security behavior risk levels. Furthermore, the results suggest that BFI score of a trait has a significant effect as users’ online personality is linked to their offline personality, especially in the conscientiousness personality trait. Additionally, this effect was stronger when personality was correlated with the factors of IT proficiency, gender, age and online activity.

Originality/value

The contributions of this paper are two-fold. First, with the aid of a large population sample, end-users’ security practice is assessed from multiple domains, and relationships were found between end-users’ risk-taking behavior and nine user-centric factors. Second, based upon these findings, the predictive ability for these user-centric factors were evaluated to determine the level of risk a user is subject to from an individual behavior perspective. Of 28 behaviors, 11 were found to have a 60 per cent or greater predictive ability, with the highest classification of 92 per cent for several behaviors. This provides a basis for organizations to use behavioral intent alongside personality traits and demographics to understand and, therefore, manage the human aspects of risk.

Keywords

Citation

Alohali, M., Clarke, N., Li, F. and Furnell, S. (2018), "Identifying and predicting the factors affecting end-users’ risk-taking behavior", Information and Computer Security, Vol. 26 No. 3, pp. 306-326. https://doi.org/10.1108/ICS-03-2018-0037

Publisher

:

Emerald Publishing Limited

Copyright © 2018, Emerald Publishing Limited

Related articles