Abstract

Many issues related to insider threat in organization had been debated ever since. Although insider attacks may not occur as frequently as external attacks, they have a higher rate of success, can go undetected, and therefore pose a much greater risk than external adversaries. In relations to that, it is not undeniably the fact that many mechanisms have been proposed in turn to be an initiative to protect data from outside attacks. What worst to comes; those mechanisms could not protect data from authorized users who may misuse their privileges. Due to that circumstances, the development of mechanisms that protect sensitive data from insiders somehow become pitch demand as in method to prevent harm caused by malicious insiders. The purpose of this paper is to find out the relationship between the appraisal process in Protection Motivation Theory (PMT) and security practice. The method of this research is the quantitative method using questionnaire. The findings shows that the contribution of Security Practice towards Perceived Security Vulnerability, Perceived Security Threats, Security Self-Efficacy, Response Efficacy, Prevention Cost, and Maladaptive Rewards. There was positive correlation between all constructs with p< .001. However, the highest relationship is between security practice and maladaptive rewards with 44% of contribution and the lowest relationship is between security practice and response efficacy with 6 % of contribution. Increases in security practice were correlated with increases rating in appraisals processes.

Key words: Insider threat, Insider attack, Protection Motivation Theory, Organization