Testing a comprehensive model of employee IS misuse in a developing economy context

Purpose This study aims to investigate employees’ information systems (IS) security deviant behavior and attempts to forecast intentions to misuse IS, emphasizing pragmatic prevention of behavioral security issues. This study explicitly fills research gaps in the developing economy context such as Ethiopia, where security issues are prevalent and context-specific security strategies and policies are lacking. Design/methodology/approach This study used a hypothetical scenario survey involving 292 employees and used partial least squares structural equation modeling with the SmartPLS 4.0 tool for data analysis. The methodology sought to explore the relationship between various rationality-based theories and security countermeasures on employees IS misuse. The authors developed a comprehensive theoretical model to address security challenges. Findings The findings revealed that neutralization techniques, excluding condemnation of the condemners, significantly predicted IS misuse. In addition, rational choice based deterrence was found to mediate the relationship between countermeasure awareness and IS misuse. Interestingly, deterrence tends to predict intentional IS misuse to a certain extent, with greater security awareness enhancing its effectiveness, which underlines the crucial influence of awareness on curbing IS misuse. Research limitations/implications The results of the study are limited by the geographical focus and cross-sectional nature of the sample and may not be generalizable in all contexts. The study needs to be replicated to examine the model across different geographical and sociocultural contexts. The study’s findings inform implications to practice and theory. Originality/value This study explores IS security deviant behavior in a developing economy where context-specific countermeasures are limited. Integrating neutralization and rational choice deterrence theories, this study suggests a new comprehensive IS misuse prediction model. The study emphasizes the pivotal role of enhanced countermeasure awareness in averting IS violations, offering new theory and practice contributions.