Coping theory and the user adaptation literature predict emotion-focused coping
as the predominant coping strategy in this low-controllability stressful condition that
requires user acceptance [11, 38]. This does not completely rule out problem-focused
coping in response to SRS. Indeed, some employees may complain to management
about unreasonable security requirements or update their security knowledge and skills
through education and training. However, a considerable body of empirical research
(e.g., [25, 39, 47, 49]) indicates that individuals rely primarily on emotion-focused
coping, at least in the short term, in response to stressful organizational conditions that
are not immediately amenable to change. Hence, in this study we restrict our focus to
emotion-focused coping in response to SRS.