Dysfunctional information system behaviors are not all created the same: Challenges to the generalizability of security-based research

• We use a four-quadrant insider dysfunctional information system behavior taxonomy.
• We analyze intentions underlying behaviors among different dysfunctional behaviors.
• The intentions vary among dysfunctional information system behaviors.
• The causal links between behavioral intentions and their predictors vary.
• We address methodological concerns in the insider dysfunctional behaviors literature.

Conflicting findings in the existing studies on insider dysfunctional information system (IS) behaviors have led some researchers to raise methodological concerns that samples in these studies are aggregated or disaggregated without sufficient attempt to differentiate their fundamental differences. Using a four-quadrant behavior taxonomy, this study investigates different types of dysfunctional information system behaviors to determine if, among them, there are any differences in behavioral intentions and in the causal links between these intentions and their predictor variables. The results show that both the intentions and the causal links between these intentions and their predictors vary among the four behavior categories.