01853nas a2200169   4500008004100000245008700041210006900128260004200197520122100239653001501460653000801475100002001483700002101503700001901524700001701543856012301560       2022                        eng d00aDo Measures of Security Compliance Intent Equal Non-Compliance Scenario Agreement?0 aDo Measures of Security Compliance Intent Equal NonCompliance Sc  aCopenhagen, Denmark,  Dec. 2022c20223 aTo better protect organizations from the threat of insiders, IS security (ISS) research frequently emphasizes IS Security Policy (ISP) behavior. The effectiveness of an assessment model is typically analyzed either using short survey statements (behavior survey) or by using scenario agreement (prospective scenario) to measure current and prospective compliance (or non-compliance) behavior.  However, a significant gap is the lack of statistical evidence to demonstrate that these two measures or dependent variables (DV) sufficiently agree with one another. We report on an effort to compare and contrast two assessment models which employed alternate styles of DVs and demonstrate that the primary construct from two different ISS behavioral theories had approximately the same effect size on either of the DVs. Our findings add support for substantial (but not overly correlated) synchronization between the two DV values, since we also observe that the prospective scenario non-compliance measure resulted in lower model fit while the behavior survey compliance measures fit both models with higher accuracy. We discuss our findings and recommend that for many studies there can be value in employing both DVs.10aAccounting10aBIS1 aMarshall, Byron1 aShadbad, Forough1 aCurry, Michael1 aBiros, David  uhttps://business.oregonstate.edu/biblio/do-measures-security-compliance-intent-equal-non-compliance-scenario-agreement01771nas a2200169   4500008004100000245008700041210006900128260004200197520122100239653001501460653000801475100002001483700002101503700001901524700001701543856004101560       2022                        eng d00aDo Measures of Security Compliance Intent Equal Non-Compliance Scenario Agreement?0 aDo Measures of Security Compliance Intent Equal NonCompliance Sc  aCopenhagen, Denmark,  Dec. 2022c20223 aTo better protect organizations from the threat of insiders, IS security (ISS) research frequently emphasizes IS Security Policy (ISP) behavior. The effectiveness of an assessment model is typically analyzed either using short survey statements (behavior survey) or by using scenario agreement (prospective scenario) to measure current and prospective compliance (or non-compliance) behavior.  However, a significant gap is the lack of statistical evidence to demonstrate that these two measures or dependent variables (DV) sufficiently agree with one another. We report on an effort to compare and contrast two assessment models which employed alternate styles of DVs and demonstrate that the primary construct from two different ISS behavioral theories had approximately the same effect size on either of the DVs. Our findings add support for substantial (but not overly correlated) synchronization between the two DV values, since we also observe that the prospective scenario non-compliance measure resulted in lower model fit while the behavior survey compliance measures fit both models with higher accuracy. We discuss our findings and recommend that for many studies there can be value in employing both DVs.10aAccounting10aBIS1 aMarshall, Byron1 aShadbad, Forough1 aCurry, Michael1 aBiros, David  uhttps://aisel.aisnet.org/wisp2022/1900411nas a2200133   4500008004100000245003500041210003500076260002700111653001500138653000800153100001900161700002000180856007700200       2012                        eng d00aDisentangling IT Artifact Bias0 aDisentangling IT Artifact Bias  aOrlando, Floridac201210aAccounting10aBIS1 aCurry, Michael1 aMarshall, Byron  uhttps://business.oregonstate.edu/biblio/disentangling-it-artifact-bias-001844nas a2200157   4500008004100000245005200041210005100093260000900144520135600153653001501509653000801524100002001532700001901552700002201571856009301593       2010                        eng d00aDoes Using CobiT Improve IT Solution Proposals?0 aDoes Using CobiT Improve IT Solution Proposals  c20103 aThe CobiT (Control Objectives for Information and related Technology) framework is designed to help organizations implement IT governance practices by systematically shaping identifiable IT processes to better leverage IT expenditures. The control structure advocated in CobiT embodies governance notions including business alignment, a risk/control perspective, systematic measurement, accountability, and continuous improvement. Despite the rise of internal control regulation, not all organizations have implemented systematic IT controls and many, notably small, organizations may never do so. This study explores whether exposing decision makers to CobiT positively affects the IT solutions they generate. We present a framework (drawn primarily from the structure of CobiT) for identifying normatively better IT plans as measured by application of governance principles. We report on 115 IT solution proposals created by business students. The proposals developed using CobiT more frequently took a risk/control approach, addressed the need for continuous improvement, referred to general IT processes, identified the people who should implement a solution, and proposed more measures of success. Thus, exposing decision makers to a systematic IT governance framework promises to help them generate more comprehensive solutions to IT challenges.10aAccounting10aBIS1 aMarshall, Byron1 aCurry, Michael1 aReitsma, Reindert  uhttps://business.oregonstate.edu/biblio/does-using-cobit-improve-it-solution-proposals-0