Information Systems Faculty Publications

Lost at the cyber-crossing? Understanding individuals’ internet security threat ambivalence and its impact on threat avoidance and approach behavior

Document Type

Article

Publication Date

6-1-2026

Abstract

Information security research has focused on how individuals avoid information security threats, especially in work environments. In voluntary, non-work settings, individuals may not always avoid the threats but may approach them despite being aware of potential risks. This threat-approach behavior creates additional vulnerabilities to cyberattack. Nonetheless, security threat approach–avoidance dynamics have received limited attention, with little practical guidance on how to address this dilemma. To fill this gap, we draw upon ambivalence theory to investigate how threat ambivalence, representing individuals’ conflicting emotions and feelings about security threats, shapes behavior following threat appraisal. Our study demonstrates that although threat appraisal still causes threat avoidance, the effect is weakened by the mediating influence of threat ambivalence. Threat ambivalence also accounts for the positive association between threat appraisal and threat-approach behavior. Furthermore, the negative impact of threat ambivalence on threat avoidance is stronger for individuals with low perceived IT proficiency. Overall, this study explains why individuals choose to approach rather than avoid security threats and highlights the importance of analyzing threat ambivalence in behavioral security research.

Comments

Available for download on Sunday, March 04, 2029

Publication Title

Information and Management

DOI

https://doi.org/10.1016/j.im.2026.104328

Link to Full Text

Share

COinS