Manager information security-related stress and organizational information security performance

Purpose Information security incidents and losses are challenging for small and medium-sized enterprises (SMEs). SME managers are under great information security-related stress (SRS) when making decisions about organizational security. Unlike previous studies concentrating on employees' SRS, this study examined whether and how SME managers' SRS affects organizational information security management performance. Based on the stressor-coping response-outcome framework, we integrated coping theory and conservation of resources theory to develop a research model. Design/methodology/approach A 2-stage mixed-methods approach was employed using survey data from 293 Chinese SME managers. Structural equation modeling (SEM) was first used to test the hypothesized relationships, and the SEM outputs were subsequently analyzed using the artificial neural network (ANN) approach to assess the relative importance of predictors. Findings The results indicated that SME managers' challenge SRS and hindrance SRS can impact information security management performance through distinct coping responses, information security commitment and support affected the relationship between SRS and coping responses and ANN analysis backed up the SEM results and showed that information security knowledge and problem-focused coping were the main and second-main factors in information security management performance. Originality/value This study focuses on SME managers and extends our knowledge of their SRS, coping strategies and information security decisions. Consequently, we offer a novel perspective and systematic theoretical exploration to promote their stress management, information security decision-making process and resource allocation.