Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness

By Burcu Bulgurcu, H. Cavusoglu, Izak Benbasat. MIS Q., 2010

2,061 citations recorded by the source corpus.

Subfields: Computer Networks and Communications, Information Systems

View Paper: https://www.semanticscholar.org/paper/4ac1e50d51647961cdf022dde4618bb68eea71bb

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

In Information Systems

Citations in the corpus

Why Do Adults Engage in Cyberbullying on Social Media? An Integration of Online Disinhibition and Deindividuation Effects with the Social Structure and Social Learning Model (2016, methodology): “Notably, we measured costs and benefits more generally, as is often the case in RCT applications to deviant behaviors (e.g., Bulgurcu et al. 2010; Hu et al. 2011), so that our adult respondents could best define what they considered to be costs and benefits for themselves.”
Information systems security policy compliance: An empirical study of the effects of socialisation, influence, and cognition (2014, background): “The findings regarding the pertinence of both the individual’s locus of control and self-efficacy in the research model are consistent with the tenets of both SCT and TPB and mirror results from comparable studies [5,16,23,33,43,54].”
Future directions for behavioral information security research (2013, background): “Beyond PMT, other empirical studiesexistthatinvestigatebehavioralfactorsthataffectsuch areas as security policy compliance (Bulgurcu et al., 2010; Herath and Rao, 2009a; Hu et al., 2011a, 2012; Siponen and Vance, 2010; Warkentin et al., 2011a), information systems misuse(D’Arcy and Hovav,2007;…”
Understanding Employee Responses to Stressful Information Security Requirements: A Coping Perspective (2014, methodology): “A similar composite PS construct has been used in prior IS security studies [13, 61].”
Organizations' Information Security Policy Compliance: Stick or Carrot Approach? (2012, background): “Recent research [13] also suggests that reward, along with other types of benefits and costs, is an influencing factor when employees make a rational choice of compliance or noncompliance.”
Technostress creators and job outcomes: theorising the moderating influence of personality traits (2015, background): “…dependence, demands for enhanced productivity and a constant need to adapt to emerging ICT applications, functionalities and workflows (e.g. Wang et al., 2008; Bulgurcu et al., 2010; Tarafdar & Tu, 2010; Tarafdar et al., 2011; Turel et al., 2011; Turel & Serenko, 2012; D’Arcy et al., 2014).”
Beyond Deterrence: An Expanded View of Employee Computer Abuse (2013, background): “…behavior of well-intentioned employees and examined factors which either hinder or facilitate compliance with security policies (Boss et al. 2009; Bulgurcu et al. 2010; Dodge et al. 2007; Herath and Rao 2009; Johnston and Warkentin 2010; Lee and Larsen 2009; Myyry et al. 2009, Pahnila et al.…”
A review and analysis of deterrence theory in the IS security literature: making sense of the disparate findings (2011, background): “Hence, studies that assessed the indirect or moderating influence of sanctions (e.g., Workman & Gathegi, 2007; Liao et al, 2009; Bulgurcu et al, 2010) are excluded.”
Managing Employee Compliance with Information Security Policies: The Critical Role of Top Management and Organizational Culture (2012, background): “This pattern is consistent with the ﬁndings of Bulgurcu et al. (2010).”