Table A1. Survey items and vignette...

Table A1.

Survey items and vignette

Construct	Item
Intention to violate information security policies	How likely is it that you would have done the same as Jim in that situation?
Intention to violate information security policies	I could see myself sharing the password as Jim did
Perceived penalty	What is the likelihood that Jim would be formally punished?
	Jim would be reprimanded at some point for sharing the password
	Jim would receive harsh sanctions for sharing the password
	If punished, Jim’s punishment would be immediate
Turnover intention	I think about leaving the company where I work
	I plan to leave the company where I work
	I want to leave the company where I work
Moral disengagement	Sharing a password really would not hurt the organization
	Giving a password to a coworker if he/she needs it does not really do any harm
	It is okay to share a password because no direct damage is done to the company
Privacy invasion	I have already been a victim of the invasion of the privacy of my personal data
	Recently, I have heard or read, about the misuse of personal data
	I see news of data leaks from companies
Common method bias	I like outside activities better than inside activities (r = 0.08^NS)
	I like to meet my friends at a restaurant more than at home (r = 0.01^NS)
	I exercise every day (r = −0.07^NS)
	Jim is an employee in your organization. One day while Jim is out of the office on
Information security policies	A sick day, one of his coworkers needs a file on Jim’s computer. The coworker is of
Violation scenario	equal rank and performs job functions similar to Jim’s. The coworker calls Jim and
	asks for the password. Although Jim knows that your organization has a policy that
(Vignette)	passwords must not be shared, he shares his password with the coworker

Construct	Item
Intention to violate information security policies	How likely is it that you would have done the same as Jim in that situation?
Intention to violate information security policies	I could see myself sharing the password as Jim did
Perceived penalty	What is the likelihood that Jim would be formally punished?
	Jim would be reprimanded at some point for sharing the password
	Jim would receive harsh sanctions for sharing the password
	If punished, Jim’s punishment would be immediate
Turnover intention	I think about leaving the company where I work
	I plan to leave the company where I work
	I want to leave the company where I work
Moral disengagement	Sharing a password really would not hurt the organization
	Giving a password to a coworker if he/she needs it does not really do any harm
	It is okay to share a password because no direct damage is done to the company
Privacy invasion	I have already been a victim of the invasion of the privacy of my personal data
	Recently, I have heard or read, about the misuse of personal data
	I see news of data leaks from companies
Common method bias	I like outside activities better than inside activities (r = 0.08^NS)
	I like to meet my friends at a restaurant more than at home (r = 0.01^NS)
	I exercise every day (r = −0.07^NS)
	Jim is an employee in your organization. One day while Jim is out of the office on
Information security policies	A sick day, one of his coworkers needs a file on Jim’s computer. The coworker is of
Violation scenario	equal rank and performs job functions similar to Jim’s. The coworker calls Jim and
	asks for the password. Although Jim knows that your organization has a policy that
(Vignette)	passwords must not be shared, he shares his password with the coworker

Note:

NS: not significant

[ViewLarge]

Sharing Unavailable