{'fraction_non_alphanumeric': 0.013584574934268186, 'fraction_numerical': 0.0, 'mean_word_length': 5.430985915492958, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Exploring the Effects of System Alert Notifications on End-User Security Behavior Intentions

Recent studies have shown that there is continued computer misuse by end-users even as organizations invest in security countermeasures. The expansion of computer and internet use has introduced unexpected consequences that have made businesses more vulnerable to computer misuse by employees. The losses suffered by organizations because of end-user computer misuse can exceed millions of dollars. Computer misuse by employees can lead to loss of revenue and productivity. One of the major investments that organizations can make to help counter computer misuse by end-users is to promote and implement security training that includes use of system security alert notification reminders. System security alert reminders also referred to as security pop-up alerts can be employed to enhance policy awareness by employees when performing their work. For this study the use of system security alert notifications as reminders in an operational environment is an extension of the Constructivism principle of Learning Theory. The Constructivism principle is based on the learner gaining knowledge from their own work experiences. It is posited that end-users' IS security knowledge and awareness will be enhanced by system security alert notifications and in turn help to counter IS misuse intentions. Past studies have examined factors that influence end-user security policy compliance based on the employee's awareness of security policy and countermeasures. Similar but separate research has also explored end-user attitude toward ethical behavior while utilizing an organization's network systems. The foundations for these two streams of research are based primarily on General Deterrence Theory (GDT) and the Theory of Reasoned Action (TRA). Research on system security alert notifications has focused on the effects of these alerts based on their message content or physical behaviors and response of participants. This study will take a different approach by developing an integrated multi-theory model to explore the impact of system security alert notifications on the relationships between end-user security policy awareness and attitude toward security with IS misuse intentions.