Behavioral and policy issues in information systems security: the insider threat
By Merrill Warkentin, Robert Willison. European Journal of Information Systems, 2009
441 citations recorded by the source corpus.
Subfields: Computer Networks and Communications, Information Systems
View Paper: https://www.semanticscholar.org/paper/251ab30aa0d534197c073610794a4e186d61adb0
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Computer Networks and Communications
- Merrill Warkentin
- Allen C. Johnston
- Robert Willison
- John D'Arcy
- Qing Hu
- Richard L. Baskerville
- Paul Benjamin Lowry
- Tejaswini C. Herath
In Information Systems
- Paul Benjamin Lowry
- Merrill Warkentin
- Allen C. Johnston
- Qing Hu
- John D'Arcy
- Richard L. Baskerville
- Robert E. Crossler
- Tejaswini C. Herath
Citations in the corpus
- Beyond Deterrence: An Expanded View of Employee Computer Abuse (2013, background): “Internal sources of threat from human perpetrators are the focus of our work and of a growing body of behavioral research within the Information Systems academic discipline (Mahmood et al. 2008; Hu et al. 2011; Stanton et al. 2005; Warkentin and Willison 2009).”
- A review and analysis of deterrence theory in the IS security literature: making sense of the disparate findings (2011, background): “Much of the behavioral IS security research has focused on the antecedents of employees’ IS security policy compliance/non-compliance and abuse or misuse of IS resources (Warkentin & Willison, 2009).”
- Fear Appeals and Information Security Behaviors: An Empirical Study (2010, background): “As a result, decentralized IT governance environments, which place a significant portion of decision making and system management in the hands of the end user, may exhibit a significant increased vulnerability profile (Warkentin and Willison, 2009).”
- Future directions for behavioral information security research (2013, background): “…still the weakest link in the defense against internal and external threats to organizational digital assets d in spite of the significant advances in protective technologies and organizational procedures and policies related to information security (Hu et al., 2012; Warkentin and Willison, 2009).”