Current directions in IS security research: towards socio‐organizational perspectives

By Gurpreet Dhillon, James Backhouse. Information Systems Journal, 2001

680 citations recorded by the source corpus.

Subfields: Information Systems, Sociology and Political Science

View Paper: https://www.semanticscholar.org/paper/40e182fff350a332d52c9dac2675e9214082abc0

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Information Systems

In Sociology and Political Science

Citations in the corpus

Information security management standards: Problems and solutions (2009, methodology): “First, scholars should be aware of the underlying theoretical foundations of different methods (e.g., Dhillon 1997, Dhillon & Backhouse 2001, Hirschheim et al. 1995), and particularly their possible weaknesses.”
Value‐focused assessment of information system security in organizations (2006, methodology): “The IS security ﬁeld has in the past been constrained by the absence of well-grounded concepts that are developed in a systematic and a methodologically sound manner (e.g. see literature reviews undertaken by Basker-ville, 1993; Dhillon & Backhouse, 2001; Siponen, 2005).”
Which Factors Explain Employees' Adherence to Information Security Policies? An Empirical Study (2007, neutral): “In order to cope with increased information security threats, not only different technical protection means (e.g., anti-virus software tools) but also information security policies (Dhillon & Backhouse, 2001; Siponen, 2005; Villarroel et al. 2005) have been suggested in the literature.”
Protection motivation and deterrence: a framework for security policy compliance in organisations (2009, background): “As Dhillon & Backhouse (2001) have pointed out, there is a great need for more empirical research that uses socio-organisational perspectives to develop key principles for the prevention of negative events in order to help in the management of information security.”
Security lapses and the omission of information security measures: A threat control model and empirical test (2008, background): “Relative specifically to the knowing-doing gap however, while various theoretical frameworks have been created (c.f. Dhillon & Backhouse, 2001 – just to name one), most have not been empirically tested (e.g., Ruighaver et al., 2007; Theoharidou, Kokolakis, Karyda, & Kiountouzis, 2005: see: Stanton,…”
Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness (2009, background): “TRA, TPB, TAM intrinsic motivation Theoharidou et al. [65] Insider threats to information systems and effectiveness of ISO17799.”
The Centrality of Awareness in the Formation of User Behavioral Intention toward Protective Information Technologies (2007, neutral): “…is a socio-technological problem that requires thorough understanding of the weakest link in the defense against security threats: human behavior and attitudes about using these security technologies (Goodhue and Straub, 1991; Straub and Welke, 1998; Dhillon and Backhouse, 2001; Hu et al., 2006).”
A review of information security issues and respective research contributions (2007, methodology): “For example, Burrell-Morgan sociological paradigms have been used to analyze information security contributions (Dhillon, 1997; Dhillon & Backhouse, 2001).”