Building on resource-based theory, we seek to explore the underlying impact of social and technical resources on e-commerce capabilities under top management support. To fully capture and understand the relationship between these important constructs, we apply a combination of complementary techniques, namely, advanced analysis of composites structural equation modelling (ADANCO-SEM) in Study 1 and fuzzy-set qualitative comparative analysis in Study 2. Study 1 findings show that e-commerce infrastructure and skills, in addition to guanxi, positively affect e-commerce capabilities. Furthermore, top management support positively moderates the relationship between e-commerce infrastructure and e-commerce capabilities, but it has no effect on the relationship between guanxi and e-commerce capabilities and on the relationship between e-commerce skills and e-commerce capabilities. Based on the findings of Study 1, Study 2 further unveils two configurations – guanxi and e-commerce infrastructure, and guanxi and e-commerce skills – that can lead to e-commerce capabilities. The moderating effect of guanxi is confirmed empirically in post hoc analysis. These results refine the findings in the ADANCO-SEM analysis concerning the conditions for the formation of e-commerce capabilities. The empirical findings can help firms use organisational resources more efficiently and thus develop e-commerce capabilities and gain competitive advantages.

Abstract As a healthcare ICT4D solution, mobile health (mHealth) can potentially improve users' well‐being during pandemics, especially in developing countries with limited healthcare resources. Recent ICT4D research reveals that providing end‐users with access to ICT is insufficient for improving well‐being and, thus, understanding how mHealth empowers end‐users to enhance well‐being against stressful events is important. However, prior research has rarely discussed the issue of empowerment in the domain of mHealth or the context of major disruptive events. This paper contributes to the literature by conceptualizing the psychological empowerment of mHealth users (PEMU) and investigating its nomological network during pandemics. Drawing upon theories of psychological empowerment and event characteristics, we developed a research model and tested it through a mixed‐methods investigation, containing a quantitative study with 602 Chinese mHealth users during COVID‐19 and a follow‐up qualitative study of 326 online articles and reviews. We found that PEMU, driven by three technological characteristics (perceived response efficacy, ease of use, and mHealth quality), affects well‐being through both (a) a stress‐buffering effect, which counterbalances the detrimental, stress‐increasing effects of event criticality and disruption, and (b) a vitality‐stimulating effect, which is intensified by event criticality. These findings have important implications for ICT4D research and practice.

Security education, training, and awareness (SETA) is one of the most common and prominent strategies for organizational security governance. However, only a small portion of practitioners claimed that their SETA programs were “very effective”. A possible reason for this is the lack of a systematic understanding of the nature of SETA programs, the paths through which SETA impacts employees’ security-related beliefs or behavioral intentions, and the conditions that might influence such a relationship. This study argues that a comprehensive literature review regarding SETA is vital for holistically investigating the findings of previous SETA research and unveiling the characteristics and factors that influence the effectiveness of SETA. A total of 80 articles, published between 1998 and 2020, were included to conduct an in-depth systematic review on SETA.

The relationship between abusive supervision and employee workplace deviance has received much attention. Conceptualizing information systems (IS) misuse as a form of workplace deviance, the literature on IS security lacks a theoretical and empirical investigation of the relationship between abusive supervision and employee IS misuse. Drawing on retaliation, displaced aggression, and neutralization, we develop and empirically test a research model of the relationships among abusive supervision, neutralization, and two types of employees’ IS misuse. Results of a two-stage survey of 203 responses showed that when individuals perceived abusive supervision, they were likely to invoke the metaphor of the ledger as a neutralization technique to rationalize their engagement in IS misuse. Our results also reveal that employees’ reactions to abusive supervision could be influenced by their tenure with supervisor. These findings contribute to the IS security field and provide important guidance for learning how leaders influence employees’ IS security behaviors.

This paper studies the adoption and diffusion of a cross-cultural Interorganizational Information System (IOS), which is used to streamline the processing of financial transactions between European investment fund companies and Taiwanese banks. Drawing from institutional and organizational legitimacy theory, we argue that the adoption and implementation of technological innovation is contingent upon its alignment with three institutional pillars in different countries and the deployment of legitimation strategies by stakeholders. Departing from classical innovation diffusion theory, our empirical investigation reveals that the implementation of a cross-cultural IOS is a dynamic process involving the recognition, understanding, and management of the regulative, normative, and cognitive challenges arising in two different institutional settings. This paper contributes to the growing body of research that highlights the significance of social and institutional influences on the adoption of IOS in a global environment.

Although several studies have discussed the framework and value of information systems (IS) security standards and certification, there has been relatively little empirical research on how different groups of stakeholders in an organization interpret and behave during the implementation process. In an attempt to fill this research gap, this study employs a socio-cognitive perspective, namely the concept of frames analysis, to investigate how the managers and employees of a financial institution make sense of IS security certification, BS 7799 Part 2, and how these interpretations influence their actions. Using an interpretive case study approach, the findings show that the expectations of management have a strong impact on the implementation of the certification process. Moreover, the incongruence between the perceptions of managers and those of the certification team and other employees means that IS security management concepts may not be fully embedded in the organization's work practices and routines. This article argues that during the certification process, managers should place more emphasis on the identification of frame incongruence and undertake early intervention to align frames in order to achieve overall security effectiveness in the organization.