Permanent URI for this collection
Browse
Recent Submissions
Publication The evolving menace of ransomware: A comparative analysis of pre-pandemic and mid-pandemic attacks(Association for Computing Machinery, 2023-10-20) Lang, Michael; Connolly, Lena; Taylor, Paul; Corner, Phillip J.Drawing upon direct interviews and secondary sources, this article presents a qualitative comparative analysis of 39 ransomware attacks, 26 of which occurred shortly before the outbreak of the COVID-19 pandemic and 13 of which took place during the pandemic. The research objective was to gain an understanding of how ransomware attacks changed tactics across this period. Using inductive content analysis, a number of key themes emerged, namely (1) ransomware attackers have adopted more sinister tactics and now commit multiple crimes to maximise their return; (2) the expanded attack surface caused by employees working from home has greatly aggravated the risk of malicious intrusion; (3) the preferred attack vectors have changed, with phishing and VPN exploits now to the fore; (4) failure to adapt common business processes from off-line to on-line interaction has created vulnerabilities; (5) the ongoing laissez-faire attitude toward cybersecurity and lack of preparedness continues to be a substantial problem; and (6) ransomware attacks now pose potentially severe consequences for individuals, whose personal data has become a central part of the game. Recommendations are proposed to address these issues.Publication Organisational culture, procedural countermeasures, and employee security behaviour: A qualitative study(Emerald, 2017-06-12) Connolly, Lena Yuryna; Lang, Michael; Gathegi, John; Tygar, Doug J.Purpose - This paper provides new insights about security behaviour in selected US and Irish organisations by investigating how organisational culture and procedural security countermeasures tend to influence employee security actions. An increasing number of information security breaches in organisations presents a serious threat to the confidentiality of personal and commercially sensitive data. While recent research shows that humans are the weakest link in the security chain and the root cause of a great portion of security breaches, the extant security literature tends to focus on technical issues.Design/methodology/approach - This paper builds on general deterrence theory and prior organisational culture literature. The methodology adapted for this study draws on the analytical grounded theory approach employing a constant comparative method.Findings - This paper demonstrates that procedural security countermeasures and organisational culture tend to affect security behaviour in organisational settings.Research limitations/implications - This paper fills the void in information security research and takes its place among the very few studies that focus on behavioural as opposed to technical issues.Practical implications - This paper highlights the important role of procedural security countermeasures, information security awareness and organisational culture in managing illicit behaviour of employees.Originality/value - This study extends general deterrence theory in a novel way by including information security awareness in the research model and by investigating both negative and positive behaviours.Publication Dissecting optional micro-decisions in online transactions: perceptions, deceptions and errors(Association for Computing Machinery (ACM), 2022-05-02) Hogan, Mairéad; Barry, Chris; Lang, Michael; |~|Online firms frequently increase profit by selling optional extras. However, opt-in rates tend to be low. In response, questionable design practices have emerged to nudge consumers into inadvertent choices. Many of these design constructs are presented using an opt-out design. Using eye tracking and think-aloud data techniques, this research investigates the impact of the framing and optionality of micro-decisions on user perceptions and error rates. Focusing on opt-out decisions, the study found: up to one in three users make errors in decision-making; there is a higher error rate for rejection-framed opt-out decisions; users widely misinterpret decision framing; and failure to read decision text results in rushed and unsighted decisions, even leading users to automatically construe un-ticked checkboxes as opt-in decisions. In talking afterwards about their experiences, users expressed strong negative emotions, feeling confused, manipulated and resentful. Many suggested they would, in practice, steer away from similar encounters toward more unambiguous and honest sites. These findings might alert managers and developers, tempted to use dark patterns, that such a strategy might backfire over time.Publication Equality, diversity, and inclusion in IS education(Information Systems and Computing Academic Professionals (ISCAP), 2022-03-15) Lang, Michael; Freeman, Mark; Kiely, Gaye; Woszczynski, Amy B.This editorial piece introduces a special issue of the Journal of Information Systems Education (JISE) on the topic of equality, diversity, and inclusion (EDI) in IS education. A number of contemporary issues are raised, such as inequality and barriers pertaining to gender, ethnicity, disability, sexuality, and socio-economic status. A set of research questions relating to EDI within IS education is set out, thus inviting further work within this important and under-researched area of our field.Publication Information security behavior: A cross-cultural comparison of Irish and US employees(Taylor and Francis, 2019-08-09) Connolly, Lena Y.; Lang, Michael; Wall, David S.This study explores how aspects of perceived national culture affect the information security attitudes and behavior of employees. Data was collected using 19 semi-structured interviews in Ireland and the United States of America (US). The main findings are that US employees in the observed organizations are more inclined to adopt formalized information security policies and procedures than Irish employees, and are also more likely to have higher levels of compliance and lower levels of non-compliance.Publication An empirical study of ransomware attacks on organizations: an assessment of severity and salient factors affecting vulnerability(Oxford University Press, 2020-12-28) Connolly, Lena Yuryna; Wall, David S.; Lang, Michael; Oddson, Bruce; Engineering and Physical Sciences Research CouncilThis study looks at the experiences of organizations that have fallen victim to ransomware attacks. Using quantitative and qualitative data of 55 ransomware cases drawn from 50 organizations in the UK and North America, we assessed the severity of the crypto-ransomware attacks experienced and looked at various factors to test if they had an influence on the degree of severity. An organization’s size was found to have no effect on the degree of severity of the attack, but the sector was found to be relevant, with private sector organizations feeling the pain much more severely than those in the public sector. Moreover, an organization’s security posture influences the degree of severity of a ransomware attack. We did not find that the attack target (i.e. human or machine) or the crypto-ransomware propagation class had any significant bearing on the severity of the outcome, but attacks that were purposefully directed at specific victims wreaked more damage than opportunistic ones.Publication How technostress and self-control of social networking sites affect academic achievement and wellbeing(Emerald, 2022-03-28) Whelan, Eoin; Golden, Willie; Tarafdar, MonideepaPurpose - Social networking sites (SNS) are heavily used by university students for personal and academic purposes. Despite their benefits, using SNS can generate stress for many people. SNS stressors have been associated with numerous maladaptive outcomes. Our objective in this study is to investigate when and how SNS use damages student achievement and psychological wellbeing. Design/methodology/approach - Combining the theoretical perspectives from technostress and the strength model of self-control, this study theoretically develops and empirically tests the pathways which explain how and when SNS stressors harm student achievement and psychological wellbeing. We test the research model through a two-wave survey of 220 SNS using university students. Findings - Our study extends existing research by showing that it is through the process of diminishing self-control over SNS use that SNS stressors inhibit achievement and wellbeing outcomes. We also find that the high use of SNS for academic purposes enhances the effect of SNS stressors on deficient SNS self-control. Originality - This study further opens up the black box of the social media technostress phenomenon by documenting and validating novel processes (i.e., deficient self-control) and conditions (i.e., enhanced academic use) on which the negative impacts of SNS stressors depend.Publication Implementing digitally enabled collaborative innovation: A case study of online and offline interaction in the German automotive industry(Wiley, 2021-05-06) Aalbers, Rick (H.L.); Whelan, EoinIn the context of implementing collaborative innovation, a range of digitally enabled infrastructures impact core organizational activities. Automotive manufacturing is one such industry where competitors now openly collaborate, facilitated through new technologies, in an effort to enhance collective innovation systems. We conducted a longitudinal case study of the first open innovation network in the German automotive industry to determine how online and offline channels interact to fuel firms' joint search for external ideas. Delving into the physical, virtual and cognitive enablers of collaborative innovation, our findings suggest that, while online platforms can help to facilitate knowledge sharing processes that promote collaborative innovation, firms implementing digitally enabled collaborative ideation need to develop additional mechanisms based on stronger offline interactions. As such, our findings contribute to a better understanding of how online technologies can facilitate knowledge sharing processes to enhance collaborative innovation.Publication A casino in my pocket: Gratifications associated with obsessive and harmonious passion for mobile gambling(Public Library of Science, 2021-02-24) Whelan, Eoin; Laato, Samuli; Islam, A. K. M. Najmul; Billieux, JoëlMobile gambling differs from land-based and traditional forms of gambling in that the opportunity to place bets and engage with casinos is constantly present and easily accessible. Instead of going to a physical bookmaker or casino, mobile gambling is done quickly and swiftly, anytime, anywhere, with a few taps on a mobile device. Previous studies reveal mobile gambling has managed to reach new audiences especially amongst younger people. Gambling harms can have severe adverse effects on individuals, families and society. However, for a subgroup of highly involved individuals, gambling can be considered a harmonious passion that permits frequent gambling without elevating individual’s risks of experience problem gambling manifestations. Combining the Uses and Gratifications (U&G) and Dualistic Model of Passion (DMP) frameworks, the present study aims to determine if and how the different gratifications sought from mobile gambling are susceptible to explaining non-problematic versus problematic patterns in highly involved gamblers. Data were collected over two waves from a global sample of mobile gamblers (N = 327). Results emphasize that the motivational underpinnings of mobile gambling (as measured by the U&G) differ in obsessive versus harmonious passion. Obsessive passion is associated with poor mood and problematic gambling. In contrast, harmonious passion for mobile gambling is associated with positive mood but is unrelated to problematic gambling. Based on these findings, and given that problematic gambling is an internationally relevant public health issue (the prevalence of problem gambling is estimated to range from 0.1% to 5.8% in different countries), we suggest interventions focusing on specific uses and gratifications associated with an obsessive passion for mobile gambling may be effective in reducing problematic usage patterns.Publication Does multitasking computer self-efficacy mitigate the impact of social media affordances on overload and fatigue among professionals?(Emerald, 2020-10-20) Islam, A.K.M. Najmul; Whelan, Eoin; Brooks, StoneyPurpose This paper investigates the moderating role of multitasking computer self-efficacy on the relationship between social media affordances and social media overload as well as its moderation between social media overload and social media fatigue. Design/methodology/approach The authors hypothesize that social media affordances will have a positive impact on social media overload (i.e. information and communication overload). They also hypothesize that social media overload will affect social media fatigue. In addition, they hypothesize that multitasking computer self-efficacy will attenuate the effect of social media affordances on both information overload and communication overload. Similarly, they also hypothesize that multitasking computer self-efficacy will attenuate the effects of both information overload and communication overload on fatigue. The authors test this model by collecting two-wave data from 220 professionals using PLS techniques. Findings Social media affordances have significant impacts on information overload, but not on communication overload. In turn, information overload and communication overload significantly affect social media fatigue. Multitasking computer self-efficacy was found to attenuate the effect of social media affordances on both information overload and communication overload. Furthermore, the study results suggest that multitasking computer self-efficacy attenuates the effect of information overload and reinforces the effect of communication overload on social media fatigue. Originality/value Most prior literature focused on students rather than on professionals. There is a lack of research that investigates how the affordances of social media relate to social media overload and fatigue. Furthermore, research that investigates mitigating mechanisms of social media fatigue has been rare. This paper fills these important research gaps.Publication How the social dimension of fitness apps can enhance and undermine wellbeing: A dual model of passion perspective(Emerald, 2020-01-02) Whelan, Eoin; Clohessy, TrevorPurpose While the positive health benefits of fitness apps, which motivate and track physical exercise, are widely acknowledged, the adverse connection between these technologies and wellbeing has received little attention. The purpose of this paper is to determine how the social dimensions of fitness apps predict the type of passion (harmonious and obsessive) one has for physical exercise, and what the resulting positive and negative implications are for wellbeing. Design/methodology/approach Drawing from the theoretical frameworks of social influence and the dual model of passion (DMP), this study develops a model depicting how fitness apps relate to the causes and consequences of harmonious and obsessive passion for exercise. Survey data were collected from 272 fitness app using cyclists and analysed with partial least squares structural equation modelling techniques. Findings Different social influence aspects of fitness apps appeal to different types of exercisers. A harmonious passion for physical exercise is predicted by the positive reciprocal benefits attained from one’s fitness app community, while an obsessive passion is predicted by positive recognition. In turn, a harmonious passion for exercise is negatively associated with life burnout, while an obsessive passion strongly affirms that relationship. In addition, the relationship between social influence and life burnout is fully mediated by the type of passion a fitness app user possesses. Originality/value Underpinned by the DMP, the study provides a theoretical framework explaining how the use of fitness apps can result in opposing wellness outcomes.Publication What drives unverified information sharing and cyberchondria during the COVID-19 pandemic?(Taylor & Francis, 2020-06-07) Laato, Samuli; Islam, A. K. M. Najmul; Islam, Muhammad Nazrul; Whelan, EoinThe World Health Organisation has emphasised that misinformation – spreading rapidly through social media – poses a serious threat to the COVID-19 response. Drawing from theories of health perception and cognitive load, we develop and test a research model hypothesising why people share unverified COVID-19 information through social media. Our findings suggest a person’s trust in online information and perceived information overload are strong predictors of unverified information sharing. Furthermore, these factors, along with a person’s perceived COVID-19 severity and vulnerability influence cyberchondria. Females were significantly more likely to suffer from cyberchondria, with males more likely to share news without verifying its reliability. Our findings suggest that to mitigate the spread of COVID-19 misinformation and cyberchondria, measures should be taken to enhance a healthy scepticism of health news while simultaneously guarding against information overload.Publication Is boredom proneness related to social media overload and fatigue? A stress–strain–outcome approach(Emerald, 2020-02-21) Whelan, Eoin; Islam, A.K.M Najmul; Brooks, Stoney; Irish Research CouncilPurpose Social media overload and fatigue have become common phenomena that are negatively affecting people's well-being and productivity. It is, therefore, important to understand the causes of social media overload and fatigue. One of the reasons why many people engage with social media is to avoid boredom. Thus, the purpose of this paper is to investigate how boredom proneness relates to social media overload and fatigue. Design/methodology/approach Building on the stress–strain–outcome framework, this paper tests a model hypothesizing the relationships between a social media user's boredom proneness, information and communication overload, and social media fatigue. The study tests the model by collecting data from 286 social media users. Findings The results suggest a strong association between boredom proneness and both information and communication overload, which, in turn, are strongly associated with social media fatigue. In addition, social media usage was found to amplify the effects of information overload on social media fatigue, but, unexpectedly, attenuates the effects of communication overload. Originality/value Prior research has largely overlooked the connection between boredom and problematic social media use. The present study addresses this important gap by developing and testing a research model relating boredom proneness to social media overload and fatigue.Publication Does passion for physical activity spillover into performance at work? Examining the direct and indirect effects of passion and life satisfaction on organisational performance and innovativeness(Taylor & Francis (Routledge), 2020-05-22) Clohessy, Trevor; Whelan, Eoin; Paradis, Kyle F.Many individuals are passionate for physical activity such as cycling, running, and soccer. Drawing from the dualistic model of passion, the purpose of the present study was to examine the direct and indirect relationships between passion (harmonious and obsessive) for physical activity, life satisfaction, performance, and innovativeness in organisational settings. Survey data were gathered from 272 cyclists who also occupied employment roles beyond their cycling pursuits. Data were analysed using structural equation modelling. Results indicated a direct positive relationship between harmonious passion and both performance and innovativeness at work. Moreover, results indicated that perceived life satisfaction indirectly influenced the relationships between harmonious passion and both performance and innovativeness at work. No significant relationships were found between obsessive passion for cycling and either organisational performance outcome. In sum, these findings suggest that passion for physical activity directly and indirectly (through life satisfaction) enhance organisational performance outcomes but only for harmonious passion.Publication Applying the SOBC paradigm to explain how social media overload affects academic performance(Elsevier, 2019-09-10) Whelan, Eoin; Islam, A.K.M. Najmul; Brooks, Stoney; Irish Research CouncilResearch suggests University students are more disposed than others to develop problematic social media use. Social media overload, the phenomenon where users are exposed to a massive amount of information and communication demands via social media that may require energy and cognitive processing beyond their capabilities, is the specific problem under investigation in this paper. Combining qualitative data with the situation organism behavior-consequence paradigm, we develop a research model of the etiology of social media overload and its consequences for student performance in higher education. Using SEM-PLS techniques to analyze survey data from 182 students revealed a fear of missing out (the situation) is associated with feelings of overload (the organism), which in turn is linked to deficient self-regulation (the behavior) and ultimately reduced performance (the consequence). Our study advances the understanding of problematic social media use among students by demonstrating the psychological and behavioral conditions which hinder academic performance. Interventions designed to address social media overload should target the performance antecedents identified in this study.Publication (De)Mystifying the information and communication technology business model concept(Inderscience, 2019-06-28) Clohessy, Trevor; Acton, Thomas; Morgan, LorraineModern enterprises are currently experiencing volatile and rapid information and communication technology (ICT) change. A key challenge for business leaders is to ensure their organisations are ready for that change. This is particularly challenging when it comes to emerging ICT that may disrupt the management of existing enterprise information systems or business processes. The business model has been cited as an effective tool which organisations can use to prepare for ICT related change. However, there is evidence to suggest that the business model remains largely a nebulous concept to most organisations. This is compounded by the siloed nature of existing business model research. Using a content analysis research approach, this paper provides a holistic review of contemporary academic literature to ascertain and classify the various approaches to the study of ICT enabled business models. The literature examined is classified into nine specific thematic descriptors which underpin these specific business models. A comprehensive definition is also developed for ICT business models. This paper therefore extends our understanding of the business model concept and can be used to guide and coalesce future research on illuminating how organisations can operationalise effective business models in order to leverage new digital ICT.Publication Contemporary digital business model decision making: a cloud computing supply-side perspective(Inderscience Publishers, 2017-07-27) Clohessy, Trevor; Acton, Thomas; Morgan, Lorraine; Science Foundation Ireland; European Regional Development FundCloud computing is an example of a promising technological paradigm which possesses the potential to act as a catalyst to drive radical innovations in the development of the networked society. While some information and communication technology (ICT) providers have reaped the rewards by transitioning from antiquated hardware and service provision to more propitious cloud-based service provision methods, others have experienced substantial difficulties related to the formulation and operationalization of effective business models. This paper presents a research framework which can serve as a lens for exploring how digital organizations can execute their core business model decisions along increasingly specific decision making levels. Taking the perspective of an exemplar established large ICT provider, our study uses the research framework in order to provide new insight for facilitating cloud computing supply-side business model effectiveness.Publication Enterprise personal analytics: The next frontier in individual information systems research(now publishers, 2018-07-12) Clohessy, Trevor; Acton, Thomas; Whelan, Eoin; Golden, WillieModern enterprise technological landscapes are being impacted by the increasing individuation of information systems (IS). Consequently, the end-user computing phenomenon is being extended to incorporate a multitude of nascent possibilities for organizations. One promising avenue encompasses the use of business analytics. Common categories of enterprise intelligence analytics are traditionally derived from activity patterns and collaborative routines. In the scope of this paper we shall focus on another emergent category of analytics which we refer to as enterprise personal analytics which encompasses the concept of organisations enabling their employees to use their individual analytics to manage their digital working lives from descriptive, diagnostic, predictive and prescriptive points of view. This topic has been only minimally analysed in IS research. Furthermore, there have been increased calls by academics to investigate the individuation of IS which has largely gone unnoticed in the IS research discipline (e.g. Baskerville, 2013). This paper therefore extends understanding by: 1. Presenting an overview of specific analytics trends which have shaped the personal analytics landscape which include: learning analytics, the quantified self, human-centric analytics, gamification, sports analytics, personal cloud and Neuro IS. 2. Presenting a framework, derived from a survey of the personal analytics literature, which consists of various combinations of research stakeholder perspectives and concerns. This framework can be used to guide and coalesce future IS research on enterprise personal analytics. 3. Identifies possible research questions aimed at highlighting how the framework can be used. 4. Provides an overview of a visual mapping artefact aimed at assisting companies with their enterprise personal analytics digital transformation journeys.Publication The real story behind big data(Ivey Business School, 2017-12) Conboy, Kieran; Whelan, Eoin; Morris, SeánThanks to the promise of business analytics, seeing data as the new oil is all the rage these days, which is why something like 85 per cent of Fortune 500 companies are investing in big data initiatives. As The Economist recently put it, “Data are to this century what oil was to the last one: a driver of growth and change.” But as The Economist also noted, successfully mining data really isn’t like extracting, refining, valuing, and trading any previous resource because it “changes the rules for markets and it demands new approaches from regulators.” It also requires deeper thought from users, which is why, despite the exponential growth and interest in business analytics, there are big question marks over the extent to which organizations actually realize value from analytics.Publication Enterprise personal analytics: Research perspectives and concerns(IGI Global, 2017) Clohessy, Trevor; Acton, ThomasModern enterprise technological landscapes are being impacted by the increasing individuation of information systems (IS). Consequently, the end-user computing phenomenon is being extended to incorporate a multitude of nascent possibilities for organizations. One promising avenue encompasses the use of business analytics. Common categories of enterprise intelligence analytics are traditionally derived from activity patterns and collaborative routines. In the scope of this paper we focus on another emergent category of analytics which we refer to as enterprise personal analytics . This topic has been only minimally analysed in IS research. This paper therefore extends understanding by presenting a grid framework which comprises various combinations of research stakeholder perspectives and concerns. This framework can be used to guide and coalesce future research on illuminating how personal analytics can be used effectively in an enterprise setting.