Sheng-Pao Shih

The Role of Extra-Role Behaviors and Social Controls in Information Security Policy Effectiveness

Although most behavioral security studies focus on organizational in-role behaviors such as information security policy ISP compliance, the role of organizational extra-role behaviors-security behaviors that benefit organizations but are not specified in ISPs-has long been overlooked. This study examines 1 the consequences of organizational in-role and extra-role security behaviors on the effectiveness of ISPs and 2 the role of formal and social controls in enhancing in-role and extra-role security behaviors in organizations. We propose that both in-role security behaviors and extra-role security behaviors contribute to ISP effectiveness. Furthermore, based on social control theory, we hypothesize that social control can boost both in-and extra-role security behaviors. Data collected from practitioners-including information systems IS managers and employees at many organizations-confirmed most of our hypotheses. Survey data from IS managers substantiated the importance of extra-role behaviors in improving ISP effectiveness. Paired data, collected from managers and employees in the same organizations, indicated that formal control and social control individually and interactively enhance both in-and extra-role security behaviors. We conclude by discussing the implications of this research for academics and practitioners, along with compelling future research possibilities.

Expertise Coordination in Information Systems Development Projects: Willingness, Ability, and Behavior:

Information systems development (ISD) projects are complex, requiring a variety of expertise. Coordinating such expertise helps manage complexity, increasing the likelihood of a projects success. Findings of past studies have been inconsistent regarding the benefits of expertise coordination—perhaps, in part, because three different forms of coordination have been used: willingness, ability, and behavior. We find that willingness and ability are antecedents of coordination behavior, and that coordination behavior fully mediates different forms of project success. Thus, successful expertise coordination requires team members who are both willing and able. The implications and limitations of this study are discussed.

Social network analysis of research collaboration in information reuse and integration

The study of information reuse and integration (IRI) is a young research field and the increasing degrees of collaboration in this field can be attributed to a predominant trend of networked publication co-authorship which itself contributes a feedback effect to the growth of the IRI community as a whole. Our analysis is based on the positive trends in the IRI community over the process of research and knowledge diffusion. Prolific researchers often initiate new ideas and achieve impacts on the whole research community. The objective of our analysis is to provide accurate viewpoints into the social-networking nature among research collaborations, including identifications of prolific researchers and research groups, trends of their collaborations, and impacts to the research community. By applying analytical processes that discover various collaboration and networking degrees exhibited in the publication co-authorship statistics obtained from our IRI community, we are able to synthesize results which identify research groups, collaboration patterns, and trends.