Can be the DOSPERT questioner used for mesuring IT risk taking

Abstract

In a previous study I modified the original DOSPERT questionnaire. And I added a new domain on IT security risk appetite. In a previous publication I presented the results of my surveys with this modified questionnaire. In the present publication, I examine the relationship between the IT security questions in the modified questionnaire and the questions in the other domains of the questionnaire. My hypothesis is that the new questions are not necessary to assess respondents' willingness to take IT security-related risks. I assumed that the answers to the original DOSPERT questions could be used to measure IT security risk appetite in my sample. Statistical tests have disproved this assumption and further investigation is needed.