Loading...
Security breaches and organization response strategy: Exploring consumers’ threat and coping appraisals
Ou,Carol Zhang,Xiaowei Angelopoulos,Spyros Davison,Robert Janse,Noury
Ou,Carol
Zhang,Xiaowei
Angelopoulos,Spyros
Davison,Robert
Janse,Noury
Abstract
We address a long-standing lacuna in the Information Management literature on the relationships among security breaches, organization response strategy as well as consumers’ threat and coping appraisal. Security breaches can involve the leak of sensitive data, and potentially lead to negative consumer reactions. It is, thus, timely and critical to theorize and empirically investigate the ways in which organization can respond effectively to security breaches and how consumers’ threat and coping appraisals vary according to the different response strategies. Our study addresses this lacuna by developing a conceptual model of i) security breach, ii) organization response strategies, and iii) consumer appraisal, grounded on the risk theory and protection motivation theory. We use the principal and agent perspectives to portray the breached organization as the agent providing the coping strategy, and consumers as the principal actors who evaluate the strategy. We incorporated a vignette-based survey to test the model with empirical data. We identify that the variations in the response strategy of organization after a security breach can lead to significantly different consumers’ reactions. We discuss the implications of our findings for theory and practice and delineate an agenda for future research.
Description
Date
2022-08
Journal Title
Journal ISSN
Volume Title
Publisher
Research Projects
Organizational Units
Journal Issue
Keywords
Corporate reputation, Intention to re-transact, Organization response strategy (ORS), Perceived risk, Protection motivation theory (PMT), Security breach
Citation
Ou, C, Zhang, X, Angelopoulos, S, Davison, R & Janse, N 2022, 'Security breaches and organization response strategy : Exploring consumers’ threat and coping appraisals', International Journal of Information Management, vol. 65, 102498. https://doi.org/10.1016/j.ijinfomgt.2022.102498