CEC Faculty Proceedings, Presentations, Speeches and Lectures


Prudent access control behavioral intention: Instrument development and validation in a healthcare environment

Event Location / Date(s)

Chicago, IL / August 15-17, 2013

Document Type

Conference Proceeding

Presentation Date


Conference Name / Publication Title

19th Americas Conference on Information Systems (AMCIS)


This study examined healthcare professionals’ prudent access control behavior using a model that integrates the Theory of Planned Behavior (TPB) and the Health Belief Model (HBM). Two additional variables - information security awareness and perceived information security responsibility were incorporated into the model. This was a behavioral information security study, which utilized rigorous instrument construction and validation techniques. Data was analyzed using Partial Least Squares (PLS), a variance based Structural Equation Modeling technique. Results of the study indicate that the HBM and TPB constructs as well as the two additional constructs included in the model are indeed key determinants of healthcare professionals’ intention to engage in prudent access control behavior that mitigate security threats. This study addresses a significant gap in the availability of measures for key determinants of prudent information security behavior.