An email system is a critical business tool and has become an essential part of everyday organisational communication. However, many organisations have experienced negative impacts from email systems in recent years due to ad-hoc implementation, prolonged management neglect and user abuse. These uncontrolled and chaotic environments are problematic for organisations. Thus, organisations consistently seek methods to bring their environments under control and technology often plays an important role in this control. When electronic communication can potentially undermine management control, management predictably assert that control more vigorously. Consequently, more and more organisations are responding to the negative effects of email systems by electronically monitoring email activities, drafting email policies and generally restricting email system use. However, electronic monitoring of email can be contentious and excessive restructuring of email can reduce its effectiveness. Furthermore, staff as self conscious and capable agents always mediate the realisation of control and can act to change it. Staff can react to change a particular context or form of control by applying their own forms of dissent, protest, and potentially transformative

The application of text mining in organizations is growing. Text classification, an important type of text mining problem, is characterized by a large attribute space and entails an efficient and effective attribute selection procedure. There are two general attribute selection approaches: the filter approach and the wrapper approach. While the wrapper approach is potentially more effective in finding the best attribute subset, it is cost-prohibitive in most text classification applications. In this paper, we propose a hybrid attribute selection approach that is both efficient and effective for text classification problems. We apply the proposed approach to detect and prevent Internet abuse in the workplace, which is becoming a major problem in modern organizations. The empirical evaluations we conducted using a variety of classification algorithms, indexing schemes, and attribute selection methods demonstrate the utility of the proposed approach. We found that combining the filter and wrapper approaches not only boosts the accuracies of text classifiers but also brings down the computational costs significantly.

Our study was initiated to provide a better understanding of the factors influencing employees ’ non-work-related computing (NWRC) behavior by comparing two models, one based on Triandis ’ Theory of Interpersonal Behavior (TIB) and the other derived from the Theory of Planned Behavior (TPB). Results of the study showed that the TIB-based model had higher explanatory power than the TPB-based model. Specifically, affect, social factors, and perceived consequences significantly influenced employees ’ intention to engage in NWRC, while intention to engage in it, habit, and facilitating conditions determined employees ’ NWRC behavior. Implications of these findings are discussed.

58 Int. J. Knowledge and Learning, Vol. 4, No. 1, 2008

This study examines how a healthcare organization’s security practices (including IT controls, policies, education, and hiring practices) influence their perceived regulatory compliance and security performance. We utilized qualitative and quantitative survey data provided by senior IT managers from 250 healthcare organizations. The data provides a snapshot of patient information security in the surveyed organizations. Healthcare organizations must focus on preventing breaches (which results in brand damage and direct remediation costs) as well as complying with government regulation (to avoid indirect costs, including fines and penalties). Using hierarchical linear modeling (HLM), we examine how specific security practices improve regulatory compliance, protect patient information, and minimize the impact of a breach incident. The results show that audit polices are positively associated with perceived regulatory compliance and security policies are associated with security performance. We also find that the interaction of both audit and security policies has a more significant effect than either type alone. Surprisingly, an organization’s level of compliance is not significantly associated with actual security performance. This study contributes to demonstrating