this factor emphasizes the individual’s
ability or judgment regarding his or her capabilities to
cope with or perform the recommended behavior. In the
context of this research, it refers to the sorts of skills and
measures needed to protect the information in one’s
organizational IS (Bandura, 1977, 1991; Woon et al. 2005;
Pahnila et al., 2007)