Employees' Behavior towards IS Security Policy Compliance

By Seppo Pahnila, Mikko T. Siponen, Motaharinia Mahmood. Hawaii International Conference on System Sciences, 2007

511 citations recorded by the source corpus.

Subfields: Computer Networks and Communications, Information Systems

View Paper: https://www.semanticscholar.org/paper/8758187a3a8473abc45b86ce32d7788ae56ebf3c

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

In Information Systems

Citations in the corpus

Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness (2009, background): “Deterrence theory Papers focusing on security policy compliance Pahnila et al. [47] Role of threat appraisal, facilitating conditions, and information quality on IS security policy compliance.”
Which Factors Explain Employees' Adherence to Information Security Policies? An Empirical Study (2007, unknown): “Aytes and Connolly (2003), Pahnila et al. (2007), Puhakainen (2006), Siponen (2000) and Siponen et al. (2007) have criticized existing information security awareness approaches as lacking not only theoretically grounded methods, but also there is no empirical evidence on their effectiveness.”
Organizations' Information Security Policy Compliance: Stick or Carrot Approach? (2012, background): “, [10, 51]), whereas rewards were found to significantly influence an employee’s belief in the benefit of security policy compliance (e.”
Security lapses and the omission of information security measures: A threat control model and empirical test (2008, methodology): “In one knowing-doing gap context, Pahnila et al. (2007) set out to explain why one would or would not follow a well-specified, well-publicized organizational security policy.”
An Enhanced Fear Appeal Rhetorical Framework: Leveraging Threats to the Human Asset Through Sanctioning Rhetoric (2015, background): “Although recent research on deterrence theory has revealed inconsistencies in explaining the effects of sanctions on security behavioral intentions (Herath and Rao 2009; Kankanhalli et al. 2003; Pahnila et al. 2007), the theory has largely been well received within the behavioral information securit”
The Impact of Organizational Commitment on Insiders’ Motivation to Protect Organizational Information Assets (2015, background): “Several previous IS PMT efforts have assessed realworld behaviors [37, 44, 48, 73, 90, 92, 113], but most of these studies focus on isolated behaviors, an issue mentioned above.”
Protection motivation and deterrence: a framework for security policy compliance in organisations (2009, methodology): “O P In the information security literature, in addition to threats affecting individuals (Anderson, 2005; Woon et al ., 2005), PMT has been applied to threats posed to organisations in a security policy compliance context (Pahnila et al ., 2007).”
A review and analysis of deterrence theory in the IS security literature: making sense of the disparate findings (2011, background): “We do note, however, that the combined sanction construct was not significant in Pahnila et al (2007) and marginally significant (and arguably below substantive significance) in Siponen et al (2007) Taken together, these findings are consistent with the notion that evaluations of the fixed…”
Motivating IS security compliance: Insights from Habit and Protection Motivation Theory (2012, background): “Of the four papers dealing with this [4,7,13,22] none discussed Antecedent sources of Information or Rewards.”