Evolvement of Information Security Research on Employees' Behavior: A Systematic Review and Future Direction

No abstract is available for this paper.

• Publication year

  2015

• Venue

  Hawaii International Conference on System Sciences

• Publication date

  2015-01-05

• Fields of study

  Business, Political Science, Computer Science

• Identifiers
  DOI 10.1109/HICSS.2015.508
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Employees' adherence to information security policies: An exploratory field study

  2014cited by this paper
• Adherence to nformation Security Policies: An Exploratory Field Study,

  2014cited by this paper
• Guidelines for improving the contextual relevance of field surveys: the case of information security policy violations

  2014cited by this paper
• Information systems security policy compliance: An empirical study of the effects of socialisation, influence, and cognition

  2014cited by this paper
• Variables influencing information security policy compliance: A systematic review of quantitative studies

  2014cited by this paper
• Information security breaches survey

  2013cited by this paper
• Determinants of social desirability bias in sensitive surveys: a literature review

  2013cited by this paper
• Knowledge-based development research: a comprehensive literature review 2000–2010

  2013cited by this paper
• Understanding computer security behavioral intention in the workplace: An empirical study of Korean firms

  2013cited by this paper
• Information Security Policy Compliance: An Empirical Study of Ethical Ideology

  2013influential reference
• Understanding the violation of IS security policy in organizations: An integrated model based on social control and deterrence theory

  2013influential reference
• Using Accountability to Reduce Access Policy Violations in Information Systems

  2013cited by this paper
• Don't make excuses! Discouraging neutralization to reduce IT policy violation

  2013influential reference
• Motivating IS security compliance: Insights from Habit and Protection Motivation Theory

  2012cited by this paper
• Training – the weakest link

  2012cited by this paper
• Managing Employee Compliance with Information Security Policies: The Critical Role of Top Management and Organizational Culture

  2012cited by this paper
• Taxonomy of compliant information security behavior

  2012cited by this paper
• The effects of multilevel sanctions on information security violations: A mediating model

  2012cited by this paper
• Understanding information systems security policy compliance: An integration of the theory of planned behavior and the protection motivation theory

  2012influential reference
• Organizations' Information Security Policy Compliance: Stick or Carrot Approach?

  2012influential reference
• Conducting systematic evidence reviews: core concepts and lessons learned.

  2012cited by this paper
• IS Security Policy Violations: A Rational Choice Perspective

  2012cited by this paper
• Out of fear or desire? Toward a better understanding of employees' motivation to follow IS security policies

  2011cited by this paper
• Punishment, Justice, and Compliance in Mandatory IT Settings

  2011cited by this paper
• Does deterrence work in reducing information security policy abuse by employees?

  2011cited by this paper
• Understanding Nonmalicious Security Violations in the Workplace: A Composite Behavior Model

  2011influential reference
• A review and analysis of deterrence theory in the IS security literature: making sense of the disparate findings

  2011cited by this paper
• The influence of the informal social learning environment on information privacy policy compliance efficacy and intention

  2011cited by this paper
• Understanding the mindset of the abusive insider: An examination of insiders' causal reasoning following internal security changes

  2011influential reference
• Enterprise information security, a review of architectures and frameworks from interoperability perspective

  2011cited by this paper
• Cochrane Handbook for Systematic Reviews of Interventions

  2010cited by this paper
• Understanding Employers’ Hiring Intentions in Relation to Qualified Workers with Disabilities: Preliminary Findings

  2010cited by this paper
• Understanding compliance with internet use policy from the perspective of rational choice theory

  2010cited by this paper
• Fear Appeals and Information Security Behaviors: An Empirical Study

  2010cited by this paper
• Neutralization: New Insights into the Problem of Employee Systems Security Policy Violations

  2010cited by this paper
• Quality and Fairness of an Information Security Policy As Antecedents of Employees' Security Engagement in the Workplace: An Empirical Investigation

  2010cited by this paper
• Compliance with Information Security Policies: An Empirical Investigation

  2010influential reference
• Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness

  2010influential reference
• What levels of moral reasoning and values explain adherence to information security rules? An empirical study

  2009cited by this paper
• User Awareness of Security Countermeasures and Its Impact on Information Systems Misuse: A Deterrence Approach

  2009influential reference
• Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness

  2009cited by this paper
• Effects of Individual and Organization Based Beliefs and the Moderating Role of Work Experience on Insiders' Good Security Behaviors

  2009cited by this paper
• Self-efficacy in information security: Its influence on end users' information security practice behavior

  2009cited by this paper
• Workplace Management and Employee Misuse: Does Punishment Matter?

  2009cited by this paper
• Does One Size Fit All? Examining the Differential Effects of IS Security Countermeasures

  2009cited by this paper
• Studying users' computer security behavior: A health belief perspective

  2009influential reference
• Impact of perceived technical protection on security behaviors

  2009cited by this paper
• Predicting and Changing Behavior: The Reasoned Action Approach

  2009influential reference
• Protection motivation and deterrence: a framework for security policy compliance in organisations

  2009cited by this paper
• If someone is watching, I'll do what I'm asked: mandatoriness, control, and information security

  2009cited by this paper
• Security lapses and the omission of information security measures: A threat control model and empirical test

  2008cited by this paper
• Information privacy compliance in the healthcare industry

  2008cited by this paper
• The Privacy Paradox: Personal Information Disclosure Intentions versus Behaviors

  2007cited by this paper
• Lessons from applying the systematic literature review process within the software engineering domain

  2007cited by this paper
• Employees' Behavior towards IS Security Policy Compliance

  2007cited by this paper
• Bmc Medical Research Methodology Open Access Development of Amstar: a Measurement Tool to Assess the Methodological Quality of Systematic Reviews

  2007influential reference
• Which Factors Explain Employees' Adherence to Information Security Policies? An Empirical Study

  2007cited by this paper
• A review of information security issues and respective research contributions

  2007cited by this paper
• Punishment and ethics deterrents: A study of insider security contravention

  2007influential reference
• Deterring internal information systems misuse

  2007cited by this paper
• The Insider Threat to Organizational Information Security: A Structural Model and Empirical Test

  2007cited by this paper
• Factors Influencing Protection Motivation and IS Security Policy Compliance

  2006cited by this paper
• Experiences using systematic review guidelines

  2006cited by this paper
• An analysis of the traditional IS security approaches: implications for research and practice

  2005cited by this paper
• An integrative model of computer abuse based on social control and general deterrence theories

  2004cited by this paper
• Procedures for Performing Systematic Reviews

  2004influential reference
• An abstract semantics tool for secure information flow of stack-based assembly programs

  2002cited by this paper
• How Virtue Fits Within Business Ethics

  2001cited by this paper
• A meta-analysis of research on protection motivation theory.

  2000cited by this paper
• Interaction effects in the theory of planned behaviour: studying cannabis use.

  1999cited by this paper
• The Effect of Codes of Ethics and Personal Denial of Responsibility on Computer Abuse Judgments and Intentions

  1996cited by this paper
• Effective IS Security: An Empirical Study

  1990cited by this paper
• Social Foundations of Thought and Action: A Social Cognitive Theory

  1985cited by this paper
• Cognitive and physiological processes in fear appeals and attitude change: a revised theory of prote

  1983cited by this paper
• Purchase Intentions and Purchase Behavior

  1979cited by this paper
• Forthcoming: Journal of Information Privacy and Security

  year unknowncited by this paper
• Journal of Criminal Law and Criminology Rational Choice, Deterrence, and Social Learning Theory in Criminology: the Path Not Taken Rational Choice, Deterrence, and Social Learning Theory in Criminology: the Path Not Taken*

  year unknowncited by this paper

• Information security risk management tools in the air traffic management domain: what are practitioners’ needs?

  2025cites this paper
• Designing an incentive mechanism for information security policy compliance: An experiment

  2023cites this paper
• Organizational Determinants and Compliance Behavior to Shape Information Security Plan

  2023influential citation
• An evaluation of practitioners’ perceptions of a security risk assessment methodology in air traffic management projects

  2022cites this paper
• Exploring Personal and Environmental Factors that Can Reduce Nonmalicious Information Security Violations

  2022cites this paper
• Social Controls and Bonds of Public Information Consumer on Sustainable Utilization and Provision for Computing

  2021cites this paper
• Information Security Behavior: Development of a Measurement Instrument Based on the Self-determination Theory

  2020cites this paper
• Real-Time Information Security Incident Management: A Case Study Using the IS-CHEC Technique

  2019cites this paper
• A conceptual model of information security compliant behaviour based on the self-determination theory

  2019cites this paper
• Revisiting information security risk management challenges: a practice perspective

  2019cites this paper
• Employee Perspective on Information Security Related Human Error in Healthcare: Proactive Use of IS-CHEC in Questionnaire Form

  2019cites this paper
• Information Security Policy Compliance

  2019influential citation
• Roles of Organizational Climate, Social Bonds, and Perceptions of Security Threats on IS Security Policy Compliance Intentions

  2018cites this paper
• Information security research: External hacking, insider breach, and profound technologies

  2017influential citation
• How Attitude Toward the Behavior, Subjective Norm, and Perceived Behavioral Control Affects Information Security Behavior Intention

  2017influential citation