Recently, there has been increasing interest in studying desirable employee security behaviors, including extra-role behavior in particular. The literature has predominantly focused on the benefits of extra-role behavior for organizational information security policy effectiveness. However, the negative outcomes of extra-role behavior have long been neglected. Therefore, drawing on the moral licensing theory, we investigate when extra-role behavior leads to employee security deviance. Specially, we see resource misuse and security carelessness as necessary forms of employee security deviance and proposes that extra-role behavior might lead to employee security deviance through psychological entitlement. This paper provides essential contributions for future security research, which aims to investigate the dark side of desirable security behavior