An understanding of insider threats in information systems (IS) is important to help address one of the dangers lurking within organizations. This article provides a review of the literature on insider compliance (and failure of compliance) with information systems' policies in order to understand the status of IS research regarding negligent and malicious insiders. We begin by defining the terms, developing a new taxonomy of insiders, and then providing a comprehensive review of articles on IS policy compliance for the past 26 years. Grounding the analysis in the literature, we inductively identify four themes to foster Information Security policy compliance among employees. The themes are: 1) IS management philosophy, 2) procedural countermeasures, 3) technical countermeasures, and 4) environmental countermeasures. We propose that future research can draw upon these themes and use them as the building blocks of an indigenous IS security theory.

Establishing a hub-based innovation ecosystem is an effective way for companies to cope with technological transformation and achieve sustainable development. While existing literature has explored how a hub firm develops or manages an innovation ecosystem, little attention has been paid to the strategic challenges in the development and management process. In strategic management, managerial cognitive capability has been proposed as a key factor that influences how firms make strategic changes and adapt to dynamic environments. Hence, from the perspective of managerial cognitive capability, this paper strives to investigate the development of an innovation ecosystem from the perspective of managerial cognitive capability. To do so, we conducted a qualitative case study of Xiaomi’s innovation ecosystem from 2010 to 2019. The research adopts an interpretive approach and finds that (1) the evolution of the innovation ecosystem can be divided into incubation, growth, and regeneration periods, with developing core products, related products, and unrelated products as respective focus; (2) under rapid technological and market changes, it is critical to match the managerial cognitive capability of the hub-firm with its innovation ecosystem; (3) building innovation ecosystems enables the hub-firm to achieve sustainable competitive advantages. The study builds a model for the growth of innovation ecosystems and enriches theoretical research on innovation ecosystems and managerial cognitive capability.

Modern organizations face significant information security threats, to which they respond with various managerial techniques. It is widely believed that “one size does not fit all” for achieving employee information security policy compliance; nevertheless, it is yet to be determined which techniques work best to different organizational employees. We further this research stream by finding that different levels of users might be effectively motivated by different types of coercive and empowering techniques that are suitable to their level and position in the organizational chart. Our results suggest that participation in the ISP decision-making process might prove to be a more effective approach to motivate lower-level employees toward compliance and that enhancing the meaningfulness of policy compliance could be the preferred method among higher levels of management. Members within each level of the organization can be effectively influenced to comply with ISPs when such strategies are customized for their level.

As an important construct in IS area, self-efficacy of individuals to engage in information security behaviors has been previously studied. We replicated one such study, which tested the influence of self-efficacy in information security (SEIS) on end user’s information security behavior. In our work, four out of six hypotheses were supported. By using different samples, our finding supported the original model and provided more research opportunities to apply this construct and model to different contexts and situations.

This study investigates the effect of ethical leadership, commitment and healthy/safe workplace practices toward employee COVID-19 vaccination. In addition, this study examines the perception of employees from technological intrusive vaccination of chips or quantum dot. In our research, we adopted the social exchange theory as its theoretical framework. Moreover, an online questionnaire was distributed to employees working in the banking sector in Lebanon during the COVID-19 pandemic. In total, 244 bankers completed the survey. Data was analyzed by SPSS statistical software version 26 and SmartPLS to test the relationship between the variables. The results generated showed a positive relationship between ethical leadership, commitment, and safety influencing employees to accept vaccination but not necessarily technological intrusive vaccination (chip or quantum dot). We suggest that organizations should influence leaders to enhance proper behaviors and attitudes to create a healthy, safe, and ethical culture that consequently increases employees’ commitment. Finally, this study recommends future researchers to investigate the topic of COVID-19 vaccination and test other employees’ perception from different industries and countries.

Purpose: This paper uses a cognitive analytics management approach to analyze, understand and solve the problems facing the implementation of information systems and help management do the needed changes to enhance such a critical process; the emergency management system in the health industry is analyzed as a case study.Design/methodology/approach: Cognitive analytics management (CAM) framework (Osman and Anouz, 2014) is used. Cognitive process: The right questions are asked to understand the behavior of every process and the flow of its corresponding data; critical data variables were identified, guidelines for identifying data sources were set. Analytics process: Techniques of data analytics were applied to the selected data sets, problems were identified in user–system interaction and in the system design. The analysis process helped the management in the management process to make right decisions for the right change.Findings: Using the CAM framework, the analysis to the Lebanese Red Cross case study identified system user-behavior problems and also system design problems. It identified cases where distributed subsystems are vulnerable to time keeping errors and helped the management make knowledgeable decisions to overcome major obstacles by implementing several changes related to hardware design, software implementation, human resource training, operational and human-technology changes. CAM is a novel and feasible software engineering approach for handling system failures.Originality/value: The paper uses CAM framework as an approach to overcome system failures and help management do the needed changes to enhance such a critical process. This work contributes to the software engineering literature by introducing CAM as a new agile methodology to be used when dealing with system failures. Furthermore, this study is an action research that validated the CAM theoretical framework in a health emergency context in Lebanon.