The widespread use of information technology and information systems (IT) throughout corporations, too often includes employees who choose not to follow the stated policies and procedures in performing their job tasks. In many cases, this encompasses employees who mean no harm, but choose not to comply with IT policies and procedures. The present study frames such compliance behavior as non-malicious IT misuse. Non-malicious IT misuse by an employee occurs when the employee improvises, takes short cuts, or works around IT procedures and guidelines in order to perform their assigned tasks. As expressed, they do not intend to cause internal control or compliance problems but may simply want to meet their assigned task objectives with the use of IT applications. Studies usually address this phenomenon with deterrence and punishment/reward theories, but literature suggests additional theoretical approaches to further understand non-malicious IT misuse. This study proposes management driven policy approaches, along with organizational factors to reduce intention of non-malicious IT misuse.
","abstract_html":"<p>The widespread use of information technology and information systems (IT) throughout corporations, too often includes employees who choose not to follow the stated policies and procedures in performing their job tasks. In many cases, this encompasses employees who mean no harm, but choose not to comply with IT policies and procedures. The present study frames such compliance behavior as non-malicious IT misuse. Non-malicious IT misuse by an employee occurs when the employee improvises, takes short cuts, or works around IT procedures and guidelines in order to perform their assigned tasks. As expressed, they do not intend to cause internal control or compliance problems but may simply want to meet their assigned task objectives with the use of IT applications. Studies usually address this phenomenon with deterrence and punishment/reward theories, but literature suggests additional theoretical approaches to further understand non-malicious IT misuse. This study proposes management driven policy approaches, along with organizational factors to reduce intention of non-malicious IT misuse.</p>","abstract_has_math":false,"creators":["Colvin, Randy G"],"institution":null,"degree_name":"Information Systems","degree_level":"Dissertation","degree_discipline":"Business Administration","degree_department":null,"school":null,"contributors":["Dr. Solomon Negash","Dr. Anne Smith"],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2016,"date_issued":"2016-07-07T07:00:00Z","date_published":"2016-07-07T07:00:00Z","updated_at":"2026-07-24T02:43:09Z","subjects":["cyber security","IT compliance","data breach","insider threats","employee IT misuse","nonmalicious IT use","Management Information Systems"],"languages":[],"rights":[],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"https://digitalcommons.kennesaw.edu/dba_etd/21","outbound_label":"Repository record","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Dr. Solomon Negash","Dr. Anne Smith"]},{"key":"dc:creator","label":"Author","values":["Colvin, Randy G"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date.available","label":"Dc Date Available","values":["2016-07-22T07:00:00Z"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Business Administration"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Dissertation"]},{"key":"thesis:degree_name","label":"Degree Name","values":["Information Systems"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["cyber security","IT compliance","data breach","insider threats","employee IT misuse","nonmalicious IT use","Management Information Systems"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["https://digitalcommons.kennesaw.edu/dba_etd/21"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description.abstract","label":"Abstract","values":["The widespread use of information technology and information systems (IT) throughout corporations, too often includes employees who choose not to follow the stated policies and procedures in performing their job tasks. In many cases, this encompasses employees who mean no harm, but choose not to comply with IT policies and procedures. The present study frames such compliance behavior as non-malicious IT misuse. Non-malicious IT misuse by an employee occurs when the employee improvises, takes short cuts, or works around IT procedures and guidelines in order to perform their assigned tasks. As expressed, they do not intend to cause internal control or compliance problems but may simply want to meet their assigned task objectives with the use of IT applications. Studies usually address this phenomenon with deterrence and punishment/reward theories, but literature suggests additional theoretical approaches to further understand non-malicious IT misuse. This study proposes management driven policy approaches, along with organizational factors to reduce intention of non-malicious IT misuse.
"]},{"key":"dc:title","label":"Title","values":["Management and Organizational Influences on the Compliance Behavior of Employees to Reduce Non-malicious IT Misuse Intention"]}]}],"canonical_facts":{"dc:contributor":["Dr. Solomon Negash","Dr. Anne Smith"],"dc:creator":["Colvin, Randy G"],"dc:date.available":["2016-07-22T07:00:00Z"],"dc:description.abstract":["The widespread use of information technology and information systems (IT) throughout corporations, too often includes employees who choose not to follow the stated policies and procedures in performing their job tasks. In many cases, this encompasses employees who mean no harm, but choose not to comply with IT policies and procedures. The present study frames such compliance behavior as non-malicious IT misuse. Non-malicious IT misuse by an employee occurs when the employee improvises, takes short cuts, or works around IT procedures and guidelines in order to perform their assigned tasks. As expressed, they do not intend to cause internal control or compliance problems but may simply want to meet their assigned task objectives with the use of IT applications. Studies usually address this phenomenon with deterrence and punishment/reward theories, but literature suggests additional theoretical approaches to further understand non-malicious IT misuse. This study proposes management driven policy approaches, along with organizational factors to reduce intention of non-malicious IT misuse.
"],"dc:identifier":["https://digitalcommons.kennesaw.edu/dba_etd/21"],"dc:subject":["cyber security","IT compliance","data breach","insider threats","employee IT misuse","nonmalicious IT use","Management Information Systems"],"dc:title":["Management and Organizational Influences on the Compliance Behavior of Employees to Reduce Non-malicious IT Misuse Intention"],"thesis:degree_discipline":["Business Administration"],"thesis:degree_level":["Dissertation"],"thesis:degree_name":["Information Systems"]},"updated_at":"2026-07-24T02:43:09Z"}