Body Worn Camera (BWC) is an Information Technology (IT) artefact that has begun to be used in law enforcement. In this paper, we develop a research model that focuses on law enforcement agents’ perspective about the ethical use of BWC, by extending rational choice theory (RCT) from the standpoint of cost/benefit of using BWC, contextual factors, as well as organisational justice. The paper tests the relationship between three factors: a) work motivation, b) cost of using BWC, and c) benefit of using BWC and police perceptions of ethical use of BWC. In addition, we test the moderating effects of work-related uncertainty on the above three relationships. The associations between organisational justice factors and work motivation are also discussed. Further, in collaboration with the National White Collar Crime Center (NW3C), we develop three grey BWC scenarios that are not clearly ethical nor clearly unethical. We apply a survey methodology to test the model in the context of grey scenarios. The results show that work motivation and the risk of using BWC are negatively related with the law enforcement agents’ perceptions about ethical use of BWC and these relationships are negatively moderated by work-related uncertainty, while justice constructs are positively associated with perceived work motivation.

This study explores ways to empower organisations to continuously improve their information security management (ISM). Drawing upon the dynamic capabilities approach, we investigated the mechanism wherein absorptive capacity has an effect. We found that absorptive capacity affects an organisation’s continuous improvement of ISM, with its effect mediated through an organisation’s adaptability to information security threats. In addition, the effect of absorptive capacity on adaptability is contingent upon the organisation’s competitive pressure, which enhances the mediating effect of adaptability. We tested our research model using survey data collected from 130 US-based managers familiar with information security management in their organisations. Theoretical and practical implications of the study are discussed.

Past research suggests that the demands of information security policies (ISPs) cause stress upon employees, leading them to violate the policies. It emphasises the distress process but overlooks a possible positive process that may arise from the ISP demands (i.e., the eustress process) and motivate employees to reduce ISP violations. This study explores both the distress and eustress processes. It proposes that the challenge and hindrance aspects of ISP demands induce these processes and subsequently affect ISP violations. Besides, employees’ ISP-related self-efficacy may facilitate or impede these processes. To test the research model, a survey was conducted on 375 employees in the U.S. The results show that the challenge aspect of ISP demands elicits a positive psychological response of employees, which in turn triggers their planful problem-solving to deal with these demands. In contrast, the hindrance aspect of ISP demands provokes a negative psychological response that triggers employees’ wishful thinking about ISP demands. Meanwhile, employees’ self-efficacy strengthens the effect of positive psychological response on planful problem-solving. Subsequently, planful problem-solving reduces employees’ intention to violate the ISP, while wishful thinking increases their intention. This dual-process view sheds new light on the connection between ISP demands and ISP violation intention.

Peers may help others avoid violating organisational information security policies (ISPs). This study explores how peer monitoring reduces employee ISP violation intention. We propose that peer monitoring discourages employees from violating ISP. Moreover, trust plays an important role. Trust not only facilitates peer monitoring, but also moderates the effect of peer monitoring on employee ISP violation intention. In addition, collective responsibility leads to peer monitoring. We test our research model with data from two waves of surveys of 254 employees in the United States conducted two weeks apart. We utilise four scenarios in the second wave of surveys capturing the dependent variable and measure all other constructs in the first wave of surveys. Our results suggest that peer monitoring decreases one’s intention to violate ISPs. Furthermore, both collective responsibility and trust contribute to peer monitoring. Finally, trust amplifies the effect of peer monitoring on employees’ intention to violate ISPs. We discuss the theoretical contributions and practical implications.

Cloud storage is a common service underlying many cloud computing applications, but its adoption is dragged by users’ concerns about privacy and security. To enhance user information control, cloud storage service providers usually offer information assurance (such as technology-based assurance and institution-based assurance), but the effects vary across contexts. We argue that information assurance represents an external motivation that ought to be internalized by the users in order for them to voluntarily use cloud storage to keep personal information. Drawing upon the self-determination theory, we examine the effects of perceived autonomy, perceived competence and perceived relatedness—three fundamental psychological needs—on the relationship between information assurance and perceived information control. An empirical study confirms our expectation, that the three psychological needs fully mediate the impact of information assurance on perceived information control, and the latter drives the adoption of cloud storage service.