Dysfunctional information system behaviors are not all created the same: Challenges to the generalizability of security-based research

Different types of dysfunctional information system behaviors are investigated to determine if, among them, there are any differences in behavioral intentions and in the causal links between these intentions and their predictor variables.

Abstract

Conflicting findings in the existing studies on insider dysfunctional information system (IS) behaviors have led some researchers to raise methodological concerns that samples in these studies are aggregated or disaggregated without sufficient attempt to differentiate their fundamental differences. Using a four-quadrant behavior taxonomy, this study investigates different types of dysfunctional information system behaviors to determine if, among them, there are any differences in behavioral intentions and in the causal links between these intentions and their predictor variables. The results show that both the intentions and the causal links between these intentions and their predictors vary among the four behavior categories.