保護動機理論(Protection motivation theory)在管理領域中學術應用

本期為大家介紹在管理等領域廣泛應用的理論模型——保護動機理論(Protection motivation theory)。

什麼是保護動機理論？

PMT的主要貢獻在於它能夠預測用戶在收到引起恐懼的威脅後保護自己的意圖：“PMT研究的目的通常是說服人們遵循溝通者的建議；因此，意圖表明了“試圖說服的有效性”一個人要進行適應性反應：(1)威脅評估包括知覺威脅的嚴重性和知覺的脆弱度。(2) 因應評估，包括反應效能、自我效能及反應成本。PMT說明中，恐懼被定義為“關係維度，在被判斷為危險並且採取保護措施的情況下被喚起”，一個人的反應效能和自我效能必須超過進行保護動機的反應成本。

模型圖：

模型變數:

1.    自變數：自變數：知覺的嚴重性、知覺的脆弱度、不適應獎勵。

2.    中介變數：害怕、反應效能、自我效能、反應成本、保護動機。

3.    依變數：安全相關行為。

模型出處

Floyd, D. L., Prentice-Dunn, S., & Rogers, R. W. (2000). A Meta-Analysis of Research on Protection Motivation Theory. Journal of Applied Social Psychology, 30(2), 407-429.

保護動機理論認為一個人做出某種行為受到以下要素影響：

◆感知威脅嚴重性(Perceived Threat Severity )：

定義：個人感受到威脅所產生的傷害，其產生的嚴重程度。

EX: 當我在醫院時，我覺得病毒很多。

◆感知威脅脆弱性(Perceived Threat Vulnerability)：

定義：個人感受到威脅所產生的傷害，其應對能力的大小。

EX:當我在醫院時， 我覺得我很容易被傳染病毒。

◆適應不良獎勵(Maladaptive Rewards)：

定義：在威脅存在的情況下所能得到的獎勵。

EX: 照顧傳染病的病人可得到更高的薪水。

◆害怕(Fear)：

定義：危險情境所產生的強烈的畏懼感。

EX: 我對病毒感到害怕。

◆反應效能(Response Efficacy)：

定義：個人對於採取某種保護行為是否可以減少威脅的認知。

EX: 我覺得戴口罩是可以減少病毒的侵犯。

◆自我效能(Self-efficacy )：

定義：對於自己有能力採取保護行為的自信心。

EX: 我認為我有能力可以保護自己的身體免於病毒感染。

◆反應成本(Response Costs)：

定義：採取保護行為所造成的相關成本，例如時間、金錢、精神等。

EX: 打疫苗來預防病毒感染是很省事的。

◆保護動機(Protection Motivation)：

定義：盡力照顧使自身權益不受損害的行動，並將使行動導向某一目標的心理傾向或內部驅力

EX: 我想要保護自己的身體免於病毒感染的動力。

◆安全相關行為(Security-related Behaviors)：

定義：沒有受到威脅、危險、危害、損失的狀態。

EX: 平時多吃維他命、戴口罩就可以免於病毒感染。

文章推薦

本期，為大家推薦2篇應用保護動機理論的英文論文，觸類旁通，總有一篇啟發你的學術靈感！

User motivations in protecting information security: Protection motivation theory versus self-determination theory

Menard, P., Bott, G. J., & Crossler, R. E. (2017).

Journal of Management Information Systems, 34(4), 1203-1230.

Keywords: information security, protection motivation theory, security model comparison, self-determination theory, user security behavior

Abstract

Managers desiring to protect information systems must understand how to most effectively motivate users to engage in secure behaviors. Information security researchers have frequently studied individuals’ performance of secure behaviors in response to threats. Protection motivation theory (PMT) has been used to explain individuals’ propensity to engage in voluntary secure behaviors, but the adaptation of this theory has yielded inconsistent results. Motivation as a measurable construct, as derived from self-determination theory (SDT), has never been included in or compared against PMT. In this study, we construct security messages that appeal to individuals’ intrinsic motivation, rather than fear, as a way to elicit secure responses. Using three sets of respondents, we integrated the SDT and PMT models and compared the native models in the context of security behaviors. We demonstrate that by using data- and individual-focused appeals and providing choices for users, managers may observe greater intention to engage in secure behavior among employees.

The impact of organizational commitment on insiders’ motivation to protect organizational information assets

Posey, C., Roberts, T. L., & Lowry, P. B. (2015). T

Journal of Management Information Systems, 32(4), 179-214.

Keywords: coping appraisal, information security, MIMIC model, organizational commitment, protection-motivated behaviors, protection motivation theory, security, structural equation modeling, threat appraisal.

Abstract

Insiders may act to sustain and improve organizational information security, yet our knowledge of what motivates them to do so remains limited. For example, most extant research relies on mere portions of protection motivation theory (PMT) and has focused on isolated behaviors, thus limiting the generalizability of findings to isolated issues, rather than addressing the global set of protective security behaviors. Here, we investigate the motivations surrounding this larger behavioral set by assessing maladaptive rewards, response costs, and fear alongside traditional PMT components. We extend PMT by showing that: (1). security education, training, and awareness (SETA) efforts help form appraisals; (2) PMT’s applicability to organizational rather than personal contexts depends on insiders’ organizational commitment levels; and (3) response costs provide the link between PMT’s appraisals. We show in detail how organizational commitment is the mechanism through which organizational security threats become personally relevant to insiders and how SETA efforts influence many PMT-based components