Impacts on Employee Coping Behaviors of Opportunities and Threats Related to the Use of Shadow IT

Auteurs

  • Yves BARLETTE Montpellier Business School
  • Jean-François BERTHEVAS La Rochelle University, LITHORAL Research Center
  • Isabelle SUEUR La Rochelle University, LITHORAL Research Center

##plugins.pubIds.doi.readerDisplayName##:

https://doi.org/10.3917/sim.234.0071

Mots-clés:

Shadow IT, sécurité, comportements, coping, orienté-problème, effets croisés

Résumé

Shadow IT (SIT) is characterized as (1) the use of unapproved IT resources by employees for the purpose of working more efficiently and (2) usage lacking malicious intent that nevertheless violates company rules and creates additional vulnerabilities that increase the risk of information security incidents. We examine SIT usage behaviors based on coping theory by conducting a survey of 429 SIT users. We contribute to the academic literature, on the one hand, by improving our understanding of the role of the balance between benefits and risks in maximization and/or protection behaviors related to SIT usage. On the other hand, we discuss and enrich the conceptual model of behavioral analysis by identifying cross effects that have not previously been studied. Our managerial contributions highlight the fact that employee maximization of SIT usage can be beneficial for companies in terms of efficiency ; however, with regard to information security, it is necessary to go beyond simple awareness because employees may not properly assess the increased risk they cause through their SIT practices.

Bibliographies de l'auteur

Yves BARLETTE, Montpellier Business School

Yves Barlette is Full Professor of Information Systems at Montpellier Business School, France. He heads the AIM Information Security Special Interest Group (GT-AIM SSI). His research focuses on behavioral issues related to information security. He has 22 publications appearing in journals such as International Journal of Information Management, Journal of Organizational Change Management, Journal of Global Information Management, Systèmes d’Information et Management, and Production Planning & Control. He also authored or coauthored 14 books and book chapters. He is Associate Editor of Communications of the AIS, editorial review board member of International Journal of Information Management and editorial board member of Information & Media.

Jean-François BERTHEVAS, La Rochelle University, LITHORAL Research Center

Jean-Francois Berthevas is Associate Professor of Information Systems at La Rochelle University School of Management, France. He is member of the LITHORAL research center. His current research focuses on information security and behavioral issues, and on the digital transformation of organizations. He has published in Systèmes d’Information et Management and has been Director of the IAE - University School of Management of La Rochelle and Orleans, France. He has 21 years of experience in business, including 10 years as an IT specialist and 7 years as manager in the field of telecommunications and cybersecurity in major companies (IBM GNS, AT&T GNS, Engie).

Isabelle SUEUR, La Rochelle University, LITHORAL Research Center

Isabelle Sueur is Professor of Marketing and Data Analysis at La Rochelle University. Her past research work is devoted to consumer behavior, particularly in the area of persuasion processes (advertising effectiveness and loyalty). She is a member of the LITHORAL research center of the University’s institute for smart urban coastal sustainability and currently serves as Vice President of the University’s governing board.

Publiée

2023-10-15

Numéro

Rubrique

Articles