IDEAS home Printed from https://ideas.repec.org/a/spr/infosf/v15y2013i1d10.1007_s10796-010-9265-x.html
   My bibliography  Save this article

Understanding insiders: An analysis of risk-taking behavior

Author

Listed:
  • Fariborz Farahmand

    (Purdue University)

  • Eugene H. Spafford

    (Purdue University)

Abstract

There is considerable research being conducted on insider threats directed to developing new technologies. At the same time, existing technology is not being fully utilized because of non-technological issues that pertain to economics and the human dimension. Issues related to how insiders actually behave are critical to ensuring that the best technologies are meeting their intended purpose. In our research, we have investigated accepted models of perceptions of risk and characteristics unique to insider threat, and we have introduced ordinal scales to these models to measure insider perceptions of risk. We have also investigated decision theories, leading to a conclusion that prospect theory, developed by Tversky and Kahneman, may be used to describe the risk-taking behavior of insiders and can be accommodated in our model. Our results indicate that there is an inverse relationship between perceived risk and benefit by insiders and that their behavior cannot be explained well by the models that are based on the traditional methods of engineering risk analysis and expected utility. We discuss the results of validating that model with forty-two senior information security executives from a variety of organizations. We also discuss how the model may be used to identify characteristics of insiders’ perceptions of risk and benefit, their risk-taking behavior and how to frame insider decisions. Finally, we recommend understanding risk of detection and creating a fair working environment to reduce the likelihood of committing criminal acts by insiders.

Suggested Citation

  • Fariborz Farahmand & Eugene H. Spafford, 2013. "Understanding insiders: An analysis of risk-taking behavior," Information Systems Frontiers, Springer, vol. 15(1), pages 5-15, March.
    • Handle: RePEc:spr:infosf:v:15:y:2013:i:1:d:10.1007_s10796-010-9265-x
    DOI: 10.1007/s10796-010-9265-x
    as

    Download full text from publisher

    File URL: http://link.springer.com/10.1007/s10796-010-9265-x
    File Function: Abstract
    Download Restriction: Access to the full text of the articles in this series is restricted.
    File URL: https://libkey.io/10.1007/s10796-010-9265-x?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Moshe Levy & Haim Levy, 2013. "Prospect Theory: Much Ado About Nothing?," World Scientific Book Chapters, in: Leonard C MacLean & William T Ziemba (ed.), HANDBOOK OF THE FUNDAMENTALS OF FINANCIAL DECISION MAKING Part I, chapter 7, pages 129-144, World Scientific Publishing Co. Pte. Ltd..
    2. repec:bla:jfinan:v:53:y:1998:i:5:p:1775-1798 is not listed on IDEAS
    3. Murray E. Jennex & Suzanne Zyngier, 2007. "Security as a contributor to knowledge management success," Information Systems Frontiers, Springer, vol. 9(5), pages 493-504, November.
    4. Daniel Kahneman & Amos Tversky, 2013. "Prospect Theory: An Analysis of Decision Under Risk," World Scientific Book Chapters, in: Leonard C MacLean & William T Ziemba (ed.), HANDBOOK OF THE FUNDAMENTALS OF FINANCIAL DECISION MAKING Part I, chapter 6, pages 99-127, World Scientific Publishing Co. Pte. Ltd..
    5. Finn Olav Sveen & Eliot Rich & Matthew Jager, 2007. "Overcoming organizational challenges to secure knowledge management," Information Systems Frontiers, Springer, vol. 9(5), pages 481-492, November.
    6. Robin L. Dillon & Catherine H. Tinsley, 2008. "How Near-Misses Influence Decision Making Under Risk: A Missed Opportunity for Learning," Management Science, INFORMS, vol. 54(8), pages 1425-1440, August.
    7. John D'Arcy & Anat Hovav & Dennis Galletta, 2009. "User Awareness of Security Countermeasures and Its Impact on Information Systems Misuse: A Deterrence Approach," Information Systems Research, INFORMS, vol. 20(1), pages 79-98, March.
    8. Daniel Kahneman & Dan Lovallo, 1993. "Timid Choices and Bold Forecasts: A Cognitive Perspective on Risk Taking," Management Science, INFORMS, vol. 39(1), pages 17-31, January.
    9. Slovic, Paul & Finucane, Melissa L. & Peters, Ellen & MacGregor, Donald G., 2007. "The affect heuristic," European Journal of Operational Research, Elsevier, vol. 177(3), pages 1333-1352, March.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Hoon S. Choi & Darrell Carpenter & Myung S. Ko, 2022. "Risk Taking Behaviors Using Public Wi-Fi™," Information Systems Frontiers, Springer, vol. 24(3), pages 965-982, June.
    2. Carly L. Huth & David W. Chadwick & William R. Claycomb & Ilsun You, 2013. "Guest editorial: A brief overview of data leakage and insider threats," Information Systems Frontiers, Springer, vol. 15(1), pages 1-4, March.
    3. Shuyuan Mary Ho & Merrill Warkentin, 2017. "Leader’s dilemma game: An experimental design for cyber insider threat research," Information Systems Frontiers, Springer, vol. 19(2), pages 377-396, April.
    4. John A. Sokolowski & Catherine M. Banks & Thomas J. Dover, 2016. "An agent-based approach to modeling insider threat," Computational and Mathematical Organization Theory, Springer, vol. 22(3), pages 273-287, September.
    5. Martin Offei & Francis Kofi Andoh-Baidoo & Emmanuel W. Ayaburi & David Asamoah, 2022. "How Do Individuals Justify and Rationalize their Criminal Behaviors in Online Romance Fraud?," Information Systems Frontiers, Springer, vol. 24(2), pages 475-491, April.
    6. Shuyuan Mary Ho & Merrill Warkentin, 0. "Leader’s dilemma game: An experimental design for cyber insider threat research," Information Systems Frontiers, Springer, vol. 0, pages 1-20.
    7. Shaio Yan Huang & Chi-Chen Lin & An-An Chiu & David C. Yen, 2017. "Fraud detection using fraud triangle risk factors," Information Systems Frontiers, Springer, vol. 19(6), pages 1343-1356, December.
    8. Ruochen Liao & Shenaz Balasinorwala & H. Raghav Rao, 2017. "Computer assisted frauds: An examination of offender and offense characteristics in relation to arrests," Information Systems Frontiers, Springer, vol. 19(3), pages 443-455, June.
    9. Shaio Yan Huang & Chi-Chen Lin & An-An Chiu & David C. Yen, 0. "Fraud detection using fraud triangle risk factors," Information Systems Frontiers, Springer, vol. 0, pages 1-14.
    10. Laurence Brooks & M. Shahanoor Alam, 2015. "Designing an information system for updating land records in Bangladesh: Action design ethnographic research (ADER)," Information Systems Frontiers, Springer, vol. 17(1), pages 79-93, February.

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Hönl, Andreas & Meissner, Philip & Wulf, Torsten, 2017. "Risk attribution theory: An exploratory conceptualization of individual choice under uncertainty," Journal of Behavioral and Experimental Economics (formerly The Journal of Socio-Economics), Elsevier, vol. 67(C), pages 20-27.
    2. Hardin, Andrew M. & Looney, Clayton Arlen, 2012. "Myopic loss aversion: Demystifying the key factors influencing decision problem framing," Organizational Behavior and Human Decision Processes, Elsevier, vol. 117(2), pages 311-331.
    3. Botond Kőszegi & Matthew Rabin, 2006. "A Model of Reference-Dependent Preferences," The Quarterly Journal of Economics, President and Fellows of Harvard College, vol. 121(4), pages 1133-1165.
    4. Martín Egozcue & Xu Guo & Wing-Keung Wong, 2015. "Optimal output for the regret-averse competitive firm under price uncertainty," Eurasian Economic Review, Springer;Eurasia Business and Economics Society, vol. 5(2), pages 279-295, December.
    5. T. K. Das & Bing-Sheng Teng, 1998. "Time and Entrepreneurial Risk Behavior," Entrepreneurship Theory and Practice, , vol. 22(2), pages 69-88, January.
    6. Tomas Bonavia & Josué Brox-Ponce, 2018. "Shame in decision making under risk conditions: Understanding the effect of transparency," PLOS ONE, Public Library of Science, vol. 13(2), pages 1-16, February.
    7. Christiane Ernst & Christian Thöni, 2013. "Bimodal Bidding in Experimental All-Pay Auctions," Games, MDPI, vol. 4(4), pages 1-16, October.
    8. Thomas Kourouxous & Thomas Bauer, 2019. "Violations of dominance in decision-making," Business Research, Springer;German Academic Association for Business Research, vol. 12(1), pages 209-239, April.
    9. Bernard, Carole & Chen, Jit Seng & Vanduffel, Steven, 2015. "Rationalizing investors’ choices," Journal of Mathematical Economics, Elsevier, vol. 59(C), pages 10-23.
    10. A. Peter McGraw & Eldar Shafir & Alexander Todorov, 2010. "Valuing Money and Things: Why a $20 Item Can Be Worth More and Less Than $20," Management Science, INFORMS, vol. 56(5), pages 816-830, May.
    11. Luigi Guiso & Tullio Jappelli, 2008. "Financial Literacy and Portfolio Diversification," Economics Working Papers ECO2008/31, European University Institute.
    12. Jakusch, Sven Thorsten & Meyer, Steffen & Hackethal, Andreas, 2019. "Taming models of prospect theory in the wild? Estimation of Vlcek and Hens (2011)," SAFE Working Paper Series 146, Leibniz Institute for Financial Research SAFE, revised 2019.
    13. Sandri, Serena & Schade, Christian & Mußhoff, Oliver & Odening, Martin, 2010. "Holding on for too long? An experimental study on inertia in entrepreneurs' and non-entrepreneurs' disinvestment choices," Journal of Economic Behavior & Organization, Elsevier, vol. 76(1), pages 30-44, October.
    14. Chi, Yichun & Zheng, Jiakun & Zhuang, Shengchao, 2022. "S-shaped narrow framing, skewness and the demand for insurance," Insurance: Mathematics and Economics, Elsevier, vol. 105(C), pages 279-292.
    15. repec:cup:judgdm:v:11:y:2016:i:5:p:424-440 is not listed on IDEAS
    16. Dew, Nicholas & Read, Stuart & Sarasvathy, Saras D. & Wiltbank, Robert, 2008. "Outlines of a behavioral theory of the entrepreneurial firm," Journal of Economic Behavior & Organization, Elsevier, vol. 66(1), pages 37-59, April.
    17. Levy, Moshe, 2022. "An inter-temporal CAPM based on First order Stochastic Dominance," European Journal of Operational Research, Elsevier, vol. 298(2), pages 734-739.
    18. Feduzi, Alberto & Runde, Jochen, 2014. "Uncovering unknown unknowns: Towards a Baconian approach to management decision-making," Organizational Behavior and Human Decision Processes, Elsevier, vol. 124(2), pages 268-283.
    19. Mike Dempsey, 2014. "The Modigliani and Miller Propositions: The History of a Failed Foundation for Corporate Finance?," Abacus, Accounting Foundation, University of Sydney, vol. 50(3), pages 279-295, September.
    20. Kuvaas, Bard & Selart, Marcus, 2004. "Effects of attribute framing on cognitive processing and evaluation," Organizational Behavior and Human Decision Processes, Elsevier, vol. 95(2), pages 198-207, November.
    21. Bo Cowgill & Eric Zitzewitz, 2015. "Corporate Prediction Markets: Evidence from Google, Ford, and Firm X," The Review of Economic Studies, Review of Economic Studies Ltd, vol. 82(4), pages 1309-1341.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:infosf:v:15:y:2013:i:1:d:10.1007_s10796-010-9265-x. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.