Date of Conferral

8-12-2026

Date of Award

August 2026

Degree

Doctor of Business Administration (D.B.A.)

School

Management

Advisor

Roger Mayer

Abstract

Password workaround (PWWA) behaviors, such as password sharing, credential reuse, and other informal security practices, continue to expose organizations to significant cybersecurity risks. Small and medium-sized enterprise (SME) leaders are particularly vulnerable because they often operate with limited resources while balancing security requirements, regulatory obligations, and operational demands. Guided by Herzberg’s two-factor theory and activity theory. The purpose of this qualitative pragmatic inquiry was to explore [CS3.1]strategies SME leaders use to identify, manage, and mitigate the financial, reputational, and regulatory risks associated with PWWA behaviors. Data were collected through semistructured interviews with 10 cybersecurity professionals and organizational leaders who had direct experience with password security practices and policy implementation. Using thematic analysis, four themes emerged: security–usability tensions and password workaround behaviors; policy–practice alignment and employee perceptions; organizational strategies for mitigating password workaround risks; and compliance, risk, and organizational consequences. A key recommendation from this project was that SME leaders should move beyond compliance-focused security approaches and adopt user-centered security controls supported by ongoing employee training and strong leadership engagement. The implications for positive social change include the potential for SME leaders to implement effective password security practices that strengthen cybersecurity resilience, reduce organizational risk, and support safer digital environments for employees, customers, and communities.

Download

Share

 
COinS