Where does cyberdeviance collide?

The umbrella label for voluntary behaviors that use information technology at work in ways that violate organizational norms, named cyberdeviancy by Weatherbee in 2010 in Counterproductive use of technology at work. Weatherbee built the category by taking Robinson and Bennett's 1995 typology of workplace deviance, which sorts rule-breaking along two axes, minor versus serious and directed at the organization versus at other people, and asking what each cell looks like when the tool is a computer. The referent here is the broad class itself, not any one behavior: it is meant to hold personal browsing, online insults, and resource misuse together under one roof. The other meanings on this page are the slices of this umbrella, each a real tradition that named and measured one corner of it.[1][2]

Unit

The category of IT-mediated norm violations at work, taken as a whole

Recovery means

Not applicable

Measured by

Framed conceptually by mapping deviance types onto technology use; measured through the facet scales below rather than a single instrument

The production-deviance corner of cyberdeviance: using a work internet connection for personal ends during paid hours, named cyberloafing by Lim in 2002 in The IT way of loafing on the job. Production deviance means giving the employer less work than agreed, and cyberloafing is that idea applied to browsing, personal email, and online shopping on the clock. In the umbrella framing this is the mildest, most studied slice, aimed at the organization rather than at coworkers, and it has its own dedicated page on this site. It is one part of cyberdeviance, not the whole: the interpersonal and property slices below describe harms that personal browsing does not capture.[3]

Unit

An episode of personal internet use during paid work time

Recovery means

Framed as intermittent bouts during the workday rather than a stable trait

Measured by

Self-report items counting how often an employee browses, emails, or shops online for personal reasons at work

The interpersonal-deviance corner of cyberdeviance: low-intensity rude, discourteous, or hostile behavior directed at other people through technology, studied as cyber incivility by Giumetti and colleagues in 2013 in What a rude e-mail!. Their experiments showed that receiving curt or demeaning email harmed a person's mood, energy, and task performance, marking this as harm aimed at coworkers rather than at the employer's output. In the umbrella framing this slice is defined by its target, a colleague, which sets it apart from cyberloafing and from resource misuse. Personal browsing withholds effort and IT misuse takes resources, but neither insults a coworker, which is the specific harm this facet names.[4]

Unit

An instance of rude or hostile IT-mediated conduct toward another person

Recovery means

Not applicable

Measured by

Experimental exposure to uncivil email and self-report incivility scales tracking mood, engagement, and performance

The property-deviance corner of cyberdeviance: misusing the organization's information systems, from unauthorized access and sharing to breaking security policy, studied as information systems misuse by D'Arcy, Hovav, and Galletta in 2009 in User awareness of security countermeasures and its impact on information systems misuse. They treated it through deterrence theory, testing whether awareness of security countermeasures reduces intention to misuse systems. Property deviance means damaging or taking the employer's assets, and here the asset is the IT resource itself. This slice is distinct from the others: it is about the systems and data as property, not about lost work time or an insulted coworker, though all three sit under the one cyberdeviance umbrella.[5]

Unit

An act of unauthorized or policy-violating use of an organization's IT systems

Recovery means

Not applicable

Measured by

Scenario-based intention scales and self-reports of policy violation, often modeled with deterrence variables