Vol.40, No.2, 2022, pp.505-515, doi:10.32604/csse.2022.018468
OPEN ACCESS
ARTICLE
Organizational Data Breach: Building Conscious Care Behavior in Incident Response
  • Adlyn Adam Teoh1, Norjihan Binti Abdul Ghani1,*, Muneer Ahmad1, Nz Jhanjhi2, Mohammed A. Alzain3, Mehedi Masud4
1 Department of Information Systems, Faculty of Computer Science & Information Technology, Universiti Malaya, 50603, Kuala Lumpur, Malaysia
2 School of Computer Science and Engineering SCE, Taylor’s University, Subang Jaya, 47500, Malaysia
3 Department of Information Technology, College of Computers and Information Technology, Taif University, Taif, 21944, Saudi Arabia
4 Department of Computer Science, College of Computers and Information Technology, Taif University,Taif, 21944, Saudi Arabia
* Corresponding Author: Norjihan Binti Abdul Ghani. Email:
Received 09 March 2021; Accepted 09 May 2021; Issue published 09 September 2021
Abstract
Organizational and end user data breaches are highly implicated by the role of information security conscious care behavior in respective incident responses. This research study draws upon the literature in the areas of information security, incident response, theory of planned behaviour, and protection motivation theory to expand and empirically validate a modified framework of information security conscious care behaviour formation. The applicability of the theoretical framework is shown through a case study labelled as a cyber-attack of unprecedented scale and sophistication in Singapore’s history to-date, the 2018 SingHealth data breach. The single in-depth case study observed information security awareness, policy, experience, attitude, subjective norms, perceived behavioral control, threat appraisal and self-efficacy as emerging prominently in the framework’s applicability in incident handling. The data analysis did not support threat severity relationship with conscious care behaviour. The findings from the above-mentioned observations are presented as possible key drivers in the shaping information security conscious care behaviour in real-world cyber incident management.
Keywords
End user computing; organizational behavior; incident response; data breach; computer emergency response team; cyber-attack
Cite This Article
Teoh, A. A., Binti, N., Ahmad, M., Jhanjhi, N., Alzain, M. A. et al. (2022). Organizational Data Breach: Building Conscious Care Behavior in Incident Response. Computer Systems Science and Engineering, 40(2), 505–515.
This work is licensed under a Creative Commons Attribution 4.0 International License , which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.