Information security policy (ISP) training plays an important role in enhancing organisational resilience against cyber threats by providing employees with the necessary knowledge and skills to effectively identify, prevent, and respond to security breaches. This research aims to explore how the use of deterrence arguments and threat arguments can enhance the effectiveness of ISP training. We theorise how ISP training affects employees’ ISP compliance behaviour by arguing for a transfer of training lens to study the effectiveness of ISP training. The results of our field experiment with triangulated data suggest that the effect of argumentative-enhanced ISP training is twofold. First, employees who participated in enhanced training sessions with deterrence and threat arguments demonstrated superior training outputs after the training, which, in turn, translated into a sustained training outcome three weeks after the training. Second, we also find evidence that threat arguments can reinforce the application of training outputs in the maintenance stage of learned behaviours. With this applied research study, we contribute to the research and practice by providing empirical evidence of the effectiveness of ISP training designs.

The expansion of technostress research in the organisational and private IS usage contexts has generated substantial theoretical and empirical insights into the relationship between technostress creators and psychological and behavioural outcomes. However, we observe empirical inconsistencies in terms of effect sizes and conceptual inconsistencies regarding the aggregated and disaggregated treatment of technostress creators. Against this background, we argue that a fine-grained estimation and comparison of effect size strengths of technostress creators on outcomes can provide clarity on these essential matters. Using the Hunter and Schmidt method, we integrated and synthesised empirical data from 102 articles, encompassing 113 independent studies with a total of 49,955 observations. Our analysis offers four important contributions to the technostress literature. First, it confirms that technostress is meaningful in terms of its detrimental impact on both psychological and behavioural outcomes. Second, the results provide accurate effect size estimates for technostress creators on different outcomes in organisational and private usage contexts. Third, the results reveal that psychological outcomes are more immediate than behavioural outcomes. Fourth, the findings suggest that in certain contexts, a disaggregated account of technostress creators can reveal meaningful empirical information.

IT alignment research has remained limited primarily to intra-organisational alignment, leaving much to learn about the value-creation potential of its largely neglected inter-organisational counterpart. This study addresses this gap by investigating the role of IT-business operational alignment in inter-organisational relationships (IOR). Drawing on IT-based value-co creation and IT alignment literature, we propose that IOR IT-business operational alignment is an immediate source for co-creating business value and can be established through a capability-building process. Using a sample of 241 regional network collaborations in Germany, we find that IOR IT-business operational alignment directly affects relationship performance. Moreover, we find that three IOR IT capabilities – IT infrastructure integration, information exchange capability, and IT-enabled coordination – enable the development of IOR IT-business operational alignment. This study contributes to IS research on value co-creation by integrating the concept of IT-business alignment into a nomological network with well-established IOR IT capabilities. We provide theoretical explanations and empirical evidence that IT infrastructure integration, information exchange capability, and IT-enabled coordination indirectly affect relationship performance over an operational alignment process. For practice, we highlight the importance of monitoring IT-business operational alignment in IOR and provide recommendations on how to expand existing alignment efforts.

The current COVID-19 crisis has seen governments worldwide mobilising to develop and implement contact-tracing apps as an integral part of their lockdown exit strategies. The challenge facing policy makers is that tracing can only be effective if the majority of the population uses the one app developed; its specifications must therefore be carefully considered. We theorise on tracing apps and mass acceptance and conduct a full-factorial experiment to investigate how app installation intention is influenced by different app specifications based on three benefit appeals, two privacy designs, and two convenience designs. By applying quantile regression, we not only estimate the general effect of these app specifications but also uncover how their influence differs among citizens with different propensities for acceptance (i.e. critics, undecided, advocates) – a crucial insight for succeeding with mass acceptance. This study contributes to research in three ways: we theorise how mass acceptance differs from established app acceptance, we provide a fine-grained approach to investigating the app specifications salient for mass acceptance, and we reveal contextualised insights specific to tracing apps with multi-layered benefit structures. Our findings can guide policy makers by providing specification recommendations for facilitating mass acceptance of tracing apps during pandemics or other societal crises.