Precaution-taking information security behaviour: toward a more nuanced leader-member-exchange perspective in information security

Hiep Cong Pham et al.

European Research on Management and Business Economics2026https://doi.org/10.1016/j.iedeen.2026.100312article
ABDC A
Weight
0.50

Abstract

Contrary to the conventional view that strong leader-member relationships naturally guarantee proactive cybersecurity efforts, this study uncovers a more intricate reality: caring leadership without tangible employee empowerment and accountability can stall precaution-taking information security behaviour. Drawing on leader-member-exchange theory, we shift the focus from individual motivators to relational dynamics, emphasizing that employees' extra-role security behaviours hinge on more than mere managerial support. Through a survey of 433 employees in Vietnamese firms, our findings reveal no direct effect of leader-member-exchange on precaution-taking information security behaviour; instead, accountability and psychological empowerment fully mediate this relationship. These results indicate that high quality leader-member-exchange is not, by itself, sufficient to explain sustained precaution taking security engagement. Instead, our evidence suggests that when leaders only care without simultaneously equipping employees with clear responsibilities (accountability) and genuine autonomy to take security precautions, and that elevated security expectations may lead to frustration or minimal compliance. By highlighting these tensions, this study expands the theoretical discourse on information security from main individualistic perspectives to the nuanced interplay of leader-employee interactions, offering a fresh rationale for why simply being supportive may not yield the desired secure behaviours. For practitioners, rather than relying on goodwill alone, organisations must ensure that accountability structures and empowerment practices are woven into the fabric of leadership styles to transform supportive relationships into robust, precaution-taking security practices.

Open via your library →

Cite this paper

https://doi.org/https://doi.org/10.1016/j.iedeen.2026.100312

Or copy a formatted citation

@article{hiep2026,
  title        = {{Precaution-taking information security behaviour: toward a more nuanced leader-member-exchange perspective in information security}},
  author       = {Hiep Cong Pham et al.},
  journal      = {European Research on Management and Business Economics},
  year         = {2026},
  doi          = {https://doi.org/https://doi.org/10.1016/j.iedeen.2026.100312},
}

Paste directly into BibTeX, Zotero, or your reference manager.

Flag this paper

Precaution-taking information security behaviour: toward a more nuanced leader-member-exchange perspective in information security

Flags are reviewed by the Arbiter methodology team within 5 business days.


Evidence weight

0.50

Balanced mode · F 0.40 / M 0.15 / V 0.05 / R 0.40

F · citation impact0.50 × 0.4 = 0.20
M · momentum0.50 × 0.15 = 0.07
V · venue signal0.50 × 0.05 = 0.03
R · text relevance †0.50 × 0.4 = 0.20

† Text relevance is estimated at 0.50 on the detail page — for your query’s actual relevance score, open this paper from a search result.