Identifying factors influencing the employee's intention with self-protective behaviors against phishing attacks
Bibliographic Data
| ID | 21596236 |
|---|---|
| Authors | Seyedeh OMSalameh Pourhashemi (0000-0002-3563-4295, Islamic Azad University Central Tehran Branch), Bilal Naqvi (0000-0001-5271-5604, Lappeenrannan-Lahden Teknillinen Yliopisto Department of Software Engineering), Mehdi Azizi Mehmandoost (0000-0002-6612-8133, ICT Research Institute) |
| Year | 2026 |
| Volume | 39 |
| Issue | 8 |
| Pages | 50-79 |
| Publication date | 2026-12-14 |
| Open Access | Yes |
| Type | ARTICLE |
| Venue | Information Technology and People (JOURNAL) |
| Journal identifiers | ISSN: 0959-3845 • E-ISSN: 1758-5813 |
| Publisher | Emerald (PUBLISHER) |
| DOI | 10.1108/itp-11-2024-1429 |
| OpenAlex | W7162749224 |
| Language | EN |
| References cited | 93 |
Purpose Phishing is a form of social engineering attack that poses an increasingly significant risk in today's digital era. The challenges and implications associated with phishing affect both end users and organizations. However, organizations face particularly serious consequences, as a single employee's error can compromise the security and privacy of the entire organization. Design/methodology/approach This research examines the factors influencing employees' intentions to adopt self-protective behaviors against phishing attacks using protection motivation theory (PMT). The study sample comprised 200 employees working in higher education institutions (HEIs). Findings Perceived vulnerability, perceived risk, perceived barriers, response efficacy and self-efficacy influence behavioral intention. The findings also identify significant positive associations between conceptual knowledge and self-efficacy, procedural knowledge and self-efficacy and perceived vulnerability and information security awareness. Originality/value This study contributes to the state of the art by extending PMT by integrating conceptual and procedural knowledge to explain employees' self-protective behaviors against phishing attacks. It also provides empirical evidence from the higher education sector, a context that has received limited attention in prior phishing research
Compromise · Conceptual model · Empirical research · Information security · Phishing · Cyberloafing and Workplace Behavior · Information and Cyber Security · Spam and Phishing Detection
Statistical Power Analysis for the Behavioral Sciences
Partial Least Squares Structural Equation Modeling (PLS-SEM) Using R
Motivating Is Security Compliance
Partial least squares structural equation modeling in HRM research
Understanding information systems security policy compliance
Information Security Policy Compliance
Untangling the antecedents of initial trust in Web-based health information
Identifying and treating unobserved heterogeneity with Fimix-PLS
What Do Systems Users Have to Fear? Using Fear Appeals to Engender Threats and Fear that Motivate Protective Security Behaviors1
Knowledge sharing behavior in virtual communities
Avoidance of Information Technology Threats
Protection motivation and deterrence
Why Do We Need What We Need? A Terror Management Perspective on the Roots of Human Social Motivation
G*Power 3
A new criterion for assessing discriminant validity in variance-based structural equation modeling
When to use and how to report the results of PLS-SEM
Evaluating Structural Equation Models with Unobservable Variables and Measurement Error
Analysis of Factors that Impact Self Efficacy in Terms of Locus Control Learning Orientation and Work Environment Characteristics
Moderating Effect of Self-Efficacy in the Relationship Between Knowledge, Attitude and Environment Behavior of Cybersecurity Awareness
Explanations in warning dialogs to help users defend against phishing attacks
Indicators of employee phishing email behaviours
What we think we know about cybersecurity
Awareness of network security and customer value – The company and customer perspective
Workplace ostracism influencing turnover intentions
A Protection Motivation Theory of Fear Appeals and Attitude Change1
Thwarting Instant Messaging Phishing Attacks
A systematic review of multi perspectives on human cybersecurity behavior
Building Cybersecurity Awareness
Online safety awareness and human factors
The impact of coronavirus pandemic (Covid-19) on education
Self-efficacy mechanism in human agency
Examining the Role of Differential Association and Techniques of Neutralization in Explaining Corporate Crime
| Highly cited | No |
|---|