## 4 Discussion and Conclusions  
This study was conducted with the aim of deliberating mobile security practices among employees and examining the possible antecedents. In accordance with the rational choice theory, we hypothesized that employees would implement mobile security practices after considering the costs (security inconvenience) and benefits (expected outcome) of the practice while being conditioned by the organizational environment (information security monitoring, job characteristics, information security training) and personal characteristics. Security inconveniences are an aspect of information security that should receive more attention from researchers. The theoretical contribution of this study can be observed in terms of specifying and operationalizing the costs and benefits consideration of mobile security practices. Models that explain the behavioral response towards security implementation should incorporate elements of inconvenience--either towards the use of the security measures itself or inconvenience in terms of achieving work targets. The findings of this study also highlight the potential of integrating rational choice theory with other behavioral theories such as the theory of reasoned action (TRA), the technology acceptance model (TAM), or the unified theory of acceptance and use of technology (UTAUT). Security measures are not without costs to both the organizations and the employees alike. While costs to the organizations are easier to determine, the costs borne by the employees are less apparent. This study has analyzed security inconvenience as a form of costs incurred by employees, and this cost was found to be significant in determining their security-related behaviors. The implementation of MDM by organizations, therefore, should consider this cost to the employees, especially when BYOD culture is applied. When faced with inconveniences, people either choose to avoid the course of action or find ways to circumvent the inconveniences. In the context of organizations, this is counter-productive and may even compromise information security controls. This is a significant implication that must be considered by MDM developers. MDM is to provide central control over policies, applications, and additional functions to mobile device usage. To a certain extent, effective MDM could complement BYOD in the workplace. It is considered a balanced and enhanced security measure for organizations by ensuring control over confidential data while allowing the convenience of using user-owned devices connecting to the system resources owned by organizations. From the organizational perspective, efforts need to be made to reduce the anxiety of user privacy issues as well as inconvenience concerns over the use of MDM solutions in future work. Anticipated benefits (expected outcomes) were found to positively affect mobile security practices (H1). Security inconvenience significantly and negatively affects mobile security practices (H2) and the expected outcome (H1). The results show support for the rational choice theory and highlight the importance of considering security inconvenience as a cost to information security measures. Inconveniences due to security measures also reduce the anticipated benefits of security efforts. The adoption of mobile devices in the workplace should strike a balance between security and usability. To accomplish this, the employee should allow the company's security experts to assess the security of their devices, and, at the same time, the employees should be allowed to evaluate the device's usability with the implementation of mobile security measures. As such, security measures and security policies should be designed with convenience in mind. \begin{table}
\begin{tabular}{c c c c c} \hline \hline
**Model** & **\(-\)2 Log Likelihood** & **Chi-Square** & _df_ & **Sig.** \\ \hline Null hypothesis & 1639.435 & & & \\ General & 1571.328  & 68.107  & 76 & 0.729 \\ \hline \hline \end{tabular}
\end{table} 
Table 9: Test of parallel lines \({}^{\text{a}}\).