Human factor is often cited as one of the biggest challenges for organizational information security management. The purpose of this paper is to investigate how and why employees fail to carry out required security tasks.,On the basis of coping theory, this paper develops a theoretical model to examine employee effortful security behavior (ESB). The model is tested with the data collected through a survey of computer users.,The results suggest that employee procrastination of security tasks and psychological detachment from security issues are two antecedents of ESB. Psychological detachment and procrastination are in turn influenced by perceived externalities of security risk and triage of business tasks over security issues by employees.,This paper contributes to the information systems security literature by providing a nuanced understanding of the antecedents and process of how employees cope with security task demands. It also offers some insights for practitioners in terms of the importance of designing and implementing security measures that are viewed as relevant to employees.

中文翻译：

---

这不关我的事：应对员工努力的安全行为的观点

人为因素通常被认为是组织信息安全管理的最大挑战之一。本文的目的是调查员工如何以及为什么无法执行所需的安全任务。在应对理论的基础上，本文建立了一种理论模型来研究员工努力的安全行为（ESB）。该模型已通过对计算机用户的调查收集的数据进行了测试。结果表明，员工对安全任务的拖延和对安全问题的心理疏离是ESB的两个先决条件。反过来，心理超脱和拖延也会受到感知到的安全风险的外部性以及员工对安全问题的业务任务分类的影响。本文通过对员工如何应对安全任务需求的前提和过程进行了细致的理解，为信息系统安全文献做出了贡献。在设计和实施被视为与员工相关的安全措施的重要性方面，它还为从业人员提供了一些见识。