Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness

By Tejaswini C. Herath, H. Rao. Decision Support Systems, 2009

946 citations recorded by the source corpus.

Subfields: Information Systems, Information Systems and Management

View Paper: https://www.semanticscholar.org/paper/84834df78e1d7a2582e954cef4762a22f4f9c7e4

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Information Systems

1. Paul Benjamin Lowry
2. Merrill Warkentin
3. Gregory Moody
4. Tom L. Roberts Jr.
5. Clay Posey
6. Allen C. Johnston
7. Lorrie Faith Cranor
8. John D'Arcy

In Information Systems and Management

1. Paul Benjamin Lowry
2. Tom L. Roberts Jr.
3. Clay Posey
4. Robert E. Crossler
5. Tamara Dinev
6. Gregory Moody
7. Alessandro Acquisti
8. Paul J. Hart

Citations in the corpus

• Information security policy compliance model in organizations (2016, background): “Experts recommend multi-perspective approaches for protecting organizations’ information assets (Herath and Rao, 2009).”
• The Impact of Organizational Commitment on Insiders’ Motivation to Protect Organizational Information Assets (2015, methodology): “Response efficacy is the perception that the recommended coping strategies can successfully attenuate the threat [83], and has been shown to play a vital role in forming insiders’ protection motivations [40].”
• Managing Employee Compliance with Information Security Policies: The Critical Role of Top Management and Organizational Culture (2012, background): “…faced with practical difficulties for measuring actual behavior, researchers have often chosen to investigate behavioral intentions as the dependent variable (e.g., Gefen, Karahanna, & Straub, 2003; Pavlou & Fygenson, 2006; Herath & Rao, 2009a, 2009b; Bulgurcu et al., 2010; Siponen & Vance, 2010).”
• What Do Systems Users Have to Fear? Using Fear Appeals to Engender Threats and Fear that Motivate Protective Security Behaviors (2015, methodology): “We also considered the Herath and Rao (2009b) and Johnston et al.”
• Nudges for Privacy and Security (2017, background): “In the corporate environment, Herath and Rao [2009] studied employees’ security behaviors and found that subjective norms, peers’ secure behaviors, and perceived effectiveness of their actions were incentives that motivated secure behavior.”
• Future directions for behavioral information security research (2013, methodology): “Beyond PMT, other empirical studiesexistthatinvestigatebehavioralfactorsthataffectsuch areas as security policy compliance (Bulgurcu et al., 2010; Herath and Rao, 2009a; Hu et al., 2011a, 2012; Siponen and Vance, 2010; Warkentin et al., 2011a), information systems misuse(D’Arcy and Hovav,2007;…”
• A review and analysis of deterrence theory in the IS security literature: making sense of the disparate findings (2011, background): “The premise being that individuals’ fear of sanctions can promote desirable compliance behaviors in an organization (Herath & Rao, 2009a, b).”