Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness

No abstract is available for this paper.

• Publication year

  2010

• Venue

  MIS Q.

• Publication date

  2010-09-01

• Fields of study

  Business, Computer Science

• Identifiers
  DOI 10.2307/25750690
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Managing Information Security

  2011cited by this paper
• Communications of the Association for Information Systems

  2011cited by this paper
• Neutralization: New Insights into the Problem of Employee Systems Security Policy Violations

  2010cited by this paper
• Rational Choice, Agency and Thoughtfully Reflective Decision Making: The Short and Long-Term Consequences of Making Good Choices

  2009cited by this paper
• User Awareness of Security Countermeasures and Its Impact on Information Systems Misuse: A Deterrence Approach

  2009cited by this paper
• If someone is watching, I'll do what I'm asked: mandatoriness, control, and information security

  2009cited by this paper
• What levels of moral reasoning and values explain adherence to information security rules? An empirical study

  2009cited by this paper
• Protection motivation and deterrence: a framework for security policy compliance in organisations

  2009cited by this paper
• Choice and Chance: A Conceptual Model of Paths to Information Security Compromise

  2009cited by this paper
• User behaviour towards protective information technologies: the role of national cultural differences

  2009cited by this paper
• Behavioral and policy issues in information systems security: the insider threat

  2009cited by this paper
• A Reasoned Action Approach to Health Promotion

  2008cited by this paper
• The psychology of security

  2008cited by this paper
• Employees' Behavior towards IS Security Policy Compliance

  2007cited by this paper
• Specifying Formative Constructs in Information Systems Research

  2007cited by this paper
• Which Factors Explain Employees' Adherence to Information Security Policies? An Empirical Study

  2007cited by this paper
• The Last Line of Defense: Motivating Employees to Follow Corporate Security Guidelines

  2007cited by this paper
• Assimilation of enterprise systems: the effect of institutional pressures and the mediating role of top management

  2007cited by this paper
• A Critical Assessment of IS Security Research between 1990-2004

  2007cited by this paper
• Information Security Risk Analysis: A Pedagogic Model Based on a Teaching Hospital

  2006cited by this paper
• Understanding the perpetration of employee computer crime in the organisational context

  2006cited by this paper
• Six Design Theories for IS Security Policies and Guidelines

  2006cited by this paper
• A design theory for information security awareness

  2006cited by this paper
• Aligning the information security policy with the strategic information systems plan

  2006cited by this paper
• The Role of Theory in Developing Effective Health Communications

  2006cited by this paper
• A Perspective on Achieving Information Security Awareness

  2005cited by this paper
• A Theoretical Integration of User Satisfaction and Technology Acceptance

  2005cited by this paper
• Analysis of end user security behaviors

  2005cited by this paper
• Can Businesses Effectively Regulate Employee Conduct? The Antecedents of Rule Following in Work Settings

  2005cited by this paper
• A Practical Guide To Factorial Validity Using PLS-Graph: Tutorial And Annotated Example

  2005cited by this paper
• An analysis of the traditional IS security approaches: implications for research and practice

  2005cited by this paper
• An integrative model of computer abuse based on social control and general deterrence theories

  2004cited by this paper
• Introducing the Check-Off Password System (COPS): An Advancement in User Authentication Methods and Information Security

  2004cited by this paper
• Information Security Policies and Procedures: A Practitioner's Reference, Second Edition

  2004cited by this paper
• Does the Perceived Risk of Punishment Deter Criminally Prone Individuals? Rational Choice, Self-Control, and Crime

  2004cited by this paper
• Economics of ITSecurity Management: Four Improvements to Current Security Practices

  2004cited by this paper
• An application of the Theory of Planned Behaviour to blood donation: the importance of self-efficacy.

  2004cited by this paper
• A model for evaluating IT security investments

  2004cited by this paper
• The Effect of Internet Security Breach Announcements on Market Value: Capital Market Reactions for Breached Firms and Internet Security Developers

  2004cited by this paper
• Recent Advances in Causal Modeling Methods for Organizational and Management Research

  2003cited by this paper
• Explaining Regulatory Non-compliance: A Survey Study of Rule Transgression for Two Dutch Instrumental Laws, Applying the Randomized Response Method

  2003cited by this paper
• Common method biases in behavioral research: a critical review of the literature and recommended remedies.

  2003cited by this paper
• Predicting the use of web-based information systems: self-efficacy, enjoyment, learning goal orientation, and the technology acceptance model

  2003cited by this paper
• An integrative study of information systems security effectiveness

  2003cited by this paper
• A Critical Review of Construct Indicators and Measurement Model Misspecification in Marketing and Consumer Research

  2003cited by this paper
• Using theory to design effective health behavior interventions.

  2003cited by this paper
• A prototype tool for information security awareness and training

  2002cited by this paper
• A holistic model of computer abuse within organizations

  2002cited by this paper
• NEW ECONOMICS OF SOCIOLOGICAL CRIMINOLOGY

  2002cited by this paper
• Five dimensions of information security awareness

  2001cited by this paper
• Information Systems Security and the Need for Policy

  2001cited by this paper
• Extending the technology acceptance model: the influence of perceived user resources

  2001cited by this paper
• Current directions in IS security research: towards socio‐organizational perspectives

  2001cited by this paper
• The Art of Deception: Controlling the Human Element of Security

  2001cited by this paper
• CSI/FBI computer crime and security survey

  2001cited by this paper
• Structural Equation Modeling and Regression: Guidelines for Research Practice

  2000cited by this paper
• Individual Acceptance of Information Technologies

  2000cited by this paper
• A conceptual foundation for organizational information security awareness

  2000cited by this paper
• Inside risks: risks of insiders

  1999cited by this paper
• ALCHEMIES OF THE MIND: RATIONALITY AND THE EMOTIONS

  1998cited by this paper
• Coping With Systems Risk: Security Planning Models for Management Decision Making

  1998cited by this paper
• Information security awareness: educating your users effectively

  1998cited by this paper
• Information Security Policies and Procedures: A Practitioner's Reference

  1998cited by this paper
• Extending the Theory of Planned Behavior: A Review and Avenues for Further Research

  1998cited by this paper
• Issues and Opinion on Structural Equation Modeling

  1998cited by this paper
• A Meta-Analysis of the Effects of Organizational Behavior Modification on Task Performance, 1975–95

  1997cited by this paper
• Managing information system security

  1997cited by this paper
• Key Issues in Information Systems Management: 1994-95 SIM Delphi Results

  1996cited by this paper
• Sanction threats and appeals to morality : Testing a rational choice model of corporate crime

  1996cited by this paper
• The Impact of Human Resource Management Practices on Turnover, Productivity, and Corporate Financial Performance

  1995cited by this paper
• Descartes' error: emotion, reason, and the human brain. avon books

  1994cited by this paper
• Self-efficacy. I: V. S. Ramachandran (red.), Encyclopedia of human behavior (vol. s. ). New York: Academic Press.

  1994cited by this paper
• A rational choice theory of corporate crime.

  1993cited by this paper
• User Acceptance of Information Technology: System Characteristics, User Perceptions and Behavioral Impacts

  1993cited by this paper
• Experimental Approaches to Studying Ethical-Unethical Behavior in Organizations

  1992cited by this paper
• Development of an Instrument to Measure the Perceptions of Adopting an Information Technology Innovation

  1991cited by this paper
• The theory of planned behavior

  1991cited by this paper
• Discovering and Disciplining Computer Abuse in Organizations: A Field Study

  1990cited by this paper
• Effective IS Security: An Empirical Study

  1990cited by this paper
• User Acceptance of Computer Technology: A Comparison of Two Theoretical Models

  1989cited by this paper
• DECISIONS TO PARTICIPATE IN AND DESIST FROM FOUR TYPES OF COMMON DELINQUENCY: DETERRENCE AND THE RATIONAL CHOICE PERSPECTIVE

  1989cited by this paper
• THE DETERRENT EFFECT OF PERCEIVED CERTAINTY AND SEVERITY OF PUNISHMENT REVISITED

  1989cited by this paper
• Tax Compliance and Perceptions of the Risks of Detection and Criminal Prosecution

  1989cited by this paper
• The moderator-mediator variable distinction in social psychological research: conceptual, strategic, and statistical considerations.

  1986cited by this paper
• Cognitive and physiological processes in fear appeals and attitude change: a revised theory of prote

  1983cited by this paper
• A Field Investigation of Causal Relations among Cognitions, Affect, Intentions, and Behavior

  1982cited by this paper
• Evaluating structural equation models with unobservable variables and measurement error.

  1981cited by this paper
• Understanding Attitudes and Predicting Social Behavior

  1980cited by this paper
• Self-Efficacy: The Exercise of Control

  1977cited by this paper
• Self-efficacy: toward a unifying theory of behavioral change.

  1977cited by this paper
• Belief, Attitude, Intention, and Behavior: An Introduction to Theory and Research

  1977cited by this paper
• Intrinsic Motivation and Self-Determination in Human Behavior

  1975cited by this paper
• Human Capital: A Theoretical and Empirical Analysis, with Special Reference to Education

  1975cited by this paper
• A Protection Motivation Theory of Fear Appeals and Attitude Change1.

  1975cited by this paper
• Causes of Delinquency.

  1970cited by this paper
• Purposive behavior in animals and men

  1932cited by this paper

• Paradox of cybersecurity? The democratic deficit in municipal work to raise citizens' risk awareness

  2026cites this paper
• When Communications Fail and Values Clash: What Drives Employees to Resist Information Security Compliance?

  2026cites this paper
• Who uses general-purpose AI? A typology of ChatGPT early adopters

  2026cites this paper
• Rethinking the Human–Technical Split in Cybersecurity

  2026cites this paper
• Towards a Usability-Focused Security Culture Framework

  2026cites this paper
• Bring-in Privacy Provisions But Shape-up Attitude Too: Building Privacy Experience in Mobile Platform Ecosystem

  2026cites this paper
• Cybersecurity management in organizations as a component of modern management systems: Integrating governance, risk, and continuous improvement

  2026cites this paper
• Non-technical determinants of information security policy compliance: An integrated PMT-TPB model with psychological ownership, trust, and social influence

  2026cites this paper
• Exploring enablers and inhibitors of smart campus business-IT alignment: a dual-factor theoretical model

  2026cites this paper
• Security fatigue: manifestation of emotional exhaustion and cynicism by depletion of self-regulation capacity

  2026cites this paper
• “Under the Shadow of Uncertainty”: the mediating role of job stress and the AI self-efficacy as a shield in cybersecurity behavior

  2026cites this paper
• Unveiling Factors Impacting Social Media Reshare in Racism Discourse

  2026cites this paper
• The boardroom firewall: Gender diversity and cybersecurity

  2026cites this paper
• Conform or Workaround? A Multilevel Analysis of the Effect of Group Cultural Tightness on Enterprise System Use

  2026cites this paper
• Lost at the Cyber-Crossing? Understanding Individuals’ Internet Security Threat Ambivalence and Its Impact on Threat Avoidance and Approach Behavior

  2026cites this paper
• Technology-based service adoption decisions: the role of value congruence and emotional dynamics

  2026cites this paper
• The impact of artificial intelligence adoption on cybersecurity behavior : a crucial role of corporate ethics

  2026influential citation
• Tourist safety management: The role of risk reminders in highly aggregated environments

  2026cites this paper
• Why ride-hailing platform firms are reluctant to share data with governments: Evidence from China

  2026cites this paper
• The role of life satisfaction in cybersecurity awareness: A broaden-and-build perspective

  2026cites this paper
• The mediating role of expectational trust in the relationship between emotional intelligence and awareness about child sexual abuse perpetrators

  2026cites this paper
• Motivating employees to engage in extra-role security behaviors: the role of information security climate and leader–member exchange

  2026cites this paper
• Data Donations: Data Disclosure for the Common Good

  2026cites this paper
• The Privacy Paradox and Algorithmic Resistance: Do Users Really Care About the Tailored Responses in Generative Artificial Intelligence

  2026cites this paper
• The 500 Most-Cited Articles in Management Information Systems: A Bibliometric and Thematic Approach

  2025cites this paper
• Human Factor Vulnerabilities in Energy Industry Cybersecurity: Assessing Employee Awareness and Behavior in Breach Prevention

  2025cites this paper
• Information Security Policy Compliance Model for the Federal Public Sector in Malaysia

  2025cites this paper
• Zero Trust in Practice: A Mixed-Methods Study Under the TOE Framework

  2025cites this paper
• Strengthening Human Resilience: The Role of Education in Preventing Social Engineering Attacks

  2025cites this paper
• Beyond adoption – factors influencing continuous wear behavior of fitness wearable devices

  2025cites this paper
• Teaching and Learning Cybersecurity Using Capture the Flag: Effectiveness Comparison Between University Students in Finland and Czechia

  2025influential citation
• A novel integrated model for investigation into employee compliance with information security policies

  2025cites this paper
• Bihevioralni pristup upravljanju sigurnosnim rizicima: rezultati empirijskog istraživanja

  2025cites this paper
• Understanding employee vulnerability to cyberattacks using the lens of strategic human resource management

  2025cites this paper
• Role of Digital Technologies Based on Cybersecurity Awareness in Enhancing Firms’ Performance: Digital Accounting Systems Setting

  2025cites this paper
• An insight towards trustworthy cloud computing: enabling restricted access control and secure service transactions using Ethereum blockchain

  2025cites this paper
• Towards a model for understanding failures in health data protection: a mixed-methods study

  2025cites this paper
• Technology transformation: analyzing its impact on internet security and compliance in an organization

  2025cites this paper
• Informal control responses to information security policy violations: A factorial survey on insurance employees' moral licensing of insider threats

  2025cites this paper
• Shadow information security practices in organizations: The role of information security transparency, overload, and psychological empowerment

  2025cites this paper
• Who cares if we get hacked? The development and testing of a measure of information security apathy

  2025cites this paper
• An investigation into network theory and how the SDP logic model facilitates compliance and the safe handling of information

  2025influential citation
• Exploring the ethical use of LLM chatbots in higher education

  2025cites this paper
• Bridging Policy and Practice: Integrated Model for Investigating Behavioral Influences on Information Security Policy Compliance

  2025cites this paper
• Toward Artificial Intelligence Compliance: Impacts and Mechanisms of Performance Feedback

  2025cites this paper
• Understanding smartphone security behavior through the core constructs of protection motivation theory: A comparative study of iOS and android users

  2025cites this paper
• Individual intellectual capital, creative process engagement and information security policy compliance

  2025cites this paper
• Beyond passwords: A review of the hidden risks in two-factor authentication

  2025cites this paper
• "I believe it's incredibly difficult to fight against this flood of spam": Towards enhancing strategies for creating effective vulnerability notifications

  2025cites this paper
• Assessing information leakage risks in Japanese enterprises: strategic management and corporate attributes

  2025cites this paper
• Understanding the factors that influence university students' behavior toward information security policies

  2025cites this paper
• Relationship of the Security Awareness and the Value Chain

  2025cites this paper
• Edge Computing Technology and Efficiency of Electronic Community Health Information System in Nyeri County, Kenya

  2025cites this paper
• Technostress and information security - A review and research agenda of security-related stress

  2025cites this paper
• Emerging Technologies as a Mediating Factor Between Causes of Cyberfraud and Cyberfraud Perpetration in the South African Banking Industry

  2025cites this paper
• Public perceptions of responsible AI in local government: A multi-country study using the theory of planned behaviour

  2025cites this paper
• A structured review of insider cybersecurity behaviour studies

  2025cites this paper
• Fear, Fun or None: A Qualitative Quest Towards Unlocking Cybersecurity Attitudes

  2025cites this paper
• Boosting employee information security compliance: the contingent roles of task–technology and person–organization fits

  2025influential citation
• Barking Up the Wrong Tree? Reconsidering Policy Compliance as a Dependent Variable Within Behavioral Cybersecurity Research

  2025cites this paper
• Self-Efficacy, Innovativeness, and Their Influence on Cybersecurity Compliance Intentions Among Public-Sector Employees in Sierra Leone

  2025cites this paper
• Influence of trust on hospital staff compliance with the data protection act, moderated by noncompliance costs - a Ugandan case study

  2025cites this paper
• Lessons Learned from Using Cyber Range to Teach Cybersecurity at Different Levels of Education

  2025cites this paper
• Curbing Dissemination of Fake News: Role of Information Verification Cost, Trust in Information, Truth-Seeking, and Fake News Awareness on Information Verification Behavior

  2025cites this paper
• The Influence of Self‐Efficacy, Trust, Perceived Costs and Healthcare‐Environment on Compliance With the Data Protection and Privacy Act by Health Workers in Uganda

  2025influential citation
• Conceptual inconsistencies in variable definitions and measurement items within ISP non-/compliance research: A systematic literature review

  2025cites this paper
• Developing a scale for measuring the information security awareness of stakeholders in higher education institutions

  2025cites this paper
• Information sharing, investment, and retaliatory posture: the role of age in preferences toward information security governance

  2025cites this paper
• Cyber safety in e-learning: The effects of cyber awareness and information security policies with moderating effects of gender and experience levels among e-learning students

  2025cites this paper
• Cultural drivers behind employees neutralizing deviant information systems security behaviors

  2025cites this paper
• Factors influencing employee compliance with information security policies: a systematic literature review of behavioral and technological aspects in cybersecurity

  2025cites this paper
• Does Leadership Approach Matter? Examining Behavioral Influences of Leaders on Employees’ Information Security Compliance

  2025cites this paper
• Integrating Behavioral Science and Cyber Threat Intelligence (CTI) to Counter Advanced Persistent Threats (APTs) and Reduce Human-Enabled Security Breaches

  2025cites this paper
• From usable design characteristics to usable information security policies: a reconceptualisation

  2025cites this paper
• Expanding integrated protection motivation theory and theory of planned behavior: The role of source of influence in flood and typhoon risk preparedness intentions in Quezon Province, Philippines

  2025cites this paper
• Testing a comprehensive model of employee IS misuse in a developing economy context

  2025cites this paper
• Utilising Manager’s Competency, Employee’s Awareness and Motivation for Promoting Cybersecurity Protective Behaviour

  2025cites this paper
• Beyond Deterrence: A Systematic Review of the Role of Autonomous Motivation in Organizational Security Behavior Studies

  2025cites this paper
• The dynamics of trust development in the life cycle of information systems’ use: a case of online dating services

  2025cites this paper
• Information security culture and phishing-reporting model: structural equivalence across Germany, UK, and USA

  2025cites this paper
• Dual identities at work: how security role and functional role shape cybersecurity behaviours

  2025cites this paper
• Overcoming barriers of corporate digital responsibility in the hospitality and tourism industry: a social identity perspective

  2025cites this paper
• A Novel Multi-agent Game-theoretic Model for Cybersecurity Strategies in EV Charging Networks: Addressing Risk Propagation and Budget Constraints

  2025cites this paper
• Integrating AI in Knowledge Management

  2025cites this paper
• Addressing organisational, individual and technological aspects and challenges in information security management: applying a framework in workplace and teleworking

  2025cites this paper
• Information Systems Protection Motivation with Ethical Appraisals

  2025cites this paper
• Exploring the impact of generative artificial intelligence on GAI-driven counterproductive work behavior: an integrated ethical decision-making perspective

  2025cites this paper
• Multicriteria Classification Method to Evaluate the Security of Information Systems for Emerging Enterprises

  2025cites this paper
• The association between the multidimensional evaluation of attitudes toward security recommendations and the intention of following those recommendations.

  2025cites this paper
• Factors influencing Chinese young adults' intention to receive HPV vaccination: the mediating role of attitude

  2025cites this paper
• Impact of Information security policy compliance on protecting patient privacy: mediating role of SETA program

  2025cites this paper
• Heeding the Messenger: The Influence of Sender Characteristics on Security Message Compliance Intentions

  2025cites this paper
• Exploring Behavioral Mechanisms of BIM Outsourcing in Construction Enterprises: A TPB-Based Empirical Study from China

  2025cites this paper
• What Influences Human Behaviour to Follow Their Intentions When It Comes to Cybersecurity?

  2025cites this paper
• Forty years of the theory of planned behavior: a bibliometric analysis (1985–2024)

  2025cites this paper
• Toward a disciplined alignment in information security management

  2025cites this paper
• User acceptance of AI-powered training: extending the technology acceptance model (TAM)

  2025cites this paper
• Turn conflict into contribution: Understanding employees' information security extra-role behavior under conflicts

  2025cites this paper
• Should we play an unfair game? The roles of regulatory effectiveness, government support and algorithmic bias in e-commerce entrepreneurial readiness

  2025cites this paper
• Promoting employees’ information security vigilance by enhancing awareness: the roles of organizational climate and deterrence measures

  2025cites this paper