To share or not to share: a behavioral perspective on human participation in security information sharing
- Mermoud, Alain ORCID Department of Defence Management, Military Academy (MILAC) at ETH Zurich, 8903 Birmensdorf, Switzerland
- Keupp, Marcus Matthias University of St. Gallen, Dufourstrasse 50, 9000 St. Gallen, Switzerland
- Huguenin, Kévin ORCID Department of Information Systems, Faculty of Business and Economics (HEC Lausanne), University of Lausanne (UNIL), 1015 Lausanne, Switzerland
- Palmié, Maximilian Institute of Technology Management, University of St. Gallen, Dufourstrasse 40a, 9000 St. Gallen, Switzerland
- Percia David, Dimitri ORCID Department of Defence Management, Military Academy (MILAC) at ETH Zurich, 8903 Birmensdorf, Switzerland
- 2019-8-26
Published in:
- Journal of Cybersecurity. - Oxford University Press (OUP). - 2019, vol. 5, no. 1
English
Abstract
Security information sharing (SIS) is an activity whereby individuals exchange information that is relevant to analyze or prevent cybersecurity incidents. However, despite technological advances and increased regulatory pressure, individuals still seem reluctant to share security information. Few contributions have addressed this conundrum to date. Adopting an interdisciplinary approach, our study proposes a behavioral framework that theorizes how and why human behavior and SIS may be associated. We use psychometric methods to test these associations, analyzing a unique sample of human Information Sharing and Analysis Center members who share real security information. We also provide a dual empirical operationalization of SIS by introducing the measures of SIS frequency and intensity. We find significant associations between human behavior and SIS. Thus, the study contributes to clarifying why SIS, while beneficial, is underutilized by pointing to the pivotal role of human behavior for economic outcomes. It therefore extends the growing field of the economics of information security. By the same token, it informs managers and regulators about the significance of human behavior as they propagate goal alignment and shape institutions. Finally, the study defines a broad agenda for future research on SIS.
- Language
-
- English
- Open access status
- gold
- Identifiers
-
- DOI 10.1093/cybsec/tyz006
- ISSN 2057-2085
- Persistent URL
- https://sonar.ch/global/documents/140134
Statistics
Document views: 38
File downloads:
- Full-text: 0