Motivating cybersecurity behaviors: a beyond reasoned action conceptualization

Purpose A critical issue in organizations concerned with cybersecurity is how to motivate personnel to engage in safety and security behaviors to counter potential threats. For these organizations to be effective, they must rely upon their members who are motivated to engage in behaviors to assure various forms of cybersecurity. Design/methodology/approach A conceptualization is described outlining the factors and processes involved in motivating cybersecurity behaviors. The theoretical starting point is the reasoned action approach (Fishbein and Ajzen, 2010), which provides a strong and parsimonious basis for considering the processes and factors that predict safety and security behaviors (intentions, perceived behavioral control, subjective norms, attitude toward the behavior and beliefs). Findings The conceptualization presented goes beyond the reasoned action approach to consider factors involved in cybersecurity behaviors that might not be reasoned (work routines and habits and motivating emotions). This more integrated conceptualization describes how personal factors such as anticipated affect, attitude toward the process and personal norms can be seen as contributing to motivated behavior. Originality/value The beyond reasoned action conceptualization is of value to organizations for which motivated safety and security behaviors contribute to their effectiveness, with the conceptualization providing practical recommendations for enhancing cyber safety and cybersecurity. A research agenda based on this beyond reasoned action conceptualization articulates numerous avenues for further investigation.