What levels of moral reasoning and values explain adherence to information security rules? An empirical study

By Liisa Myyry, Mikko T. Siponen, Seppo Pahnila, Tero Vartiainen, Anthony Vance. European Journal of Information Systems, 2009

317 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Information Systems

View Paper: https://www.semanticscholar.org/paper/be24103d7baf62ad6fae1a86afebcabda5e05664

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Information Systems

Citations in the corpus

Future directions for behavioral information security research (2013, background): “…et al., 2010), neutralization (Siponen and Vance, 2010), fear (Johnston and Warkentin, 2010), self-control and moral beliefs (Hu et al., 2011a; Myyry et al., 2009), accountability (Vance et al., 2011, 2012a), disgruntle-ment (Willison and Warkentin, 2013), and leadership and organizational…”
A review and analysis of deterrence theory in the IS security literature: making sense of the disparate findings (2011, background): “Kohlberg’s theory postulates that moral European Journal of Information Systems judgment is developed through six stages which are embedded within three broad categories: preconventional, conventional, and principled (Myyry et al, 2009).”
The role of brand reputation in organic food consumption: A behavioral reasoning perspective (2018, background): “Reasoning refers to the process used by an individual to determine his/her course of action (Myyry et al., 2009).”
The Effects of Performance Rating, Leader–Member Exchange, Perceived Utility, and Organizational Justice on Performance Appraisal Satisfaction: Applying a Moral Judgment Perspective (2014, background): “ment (Greenberg 2002; Monga 2007) and related applied disciplines (Myyry et al. 2009).”
Managing Employee Compliance with Information Security Policies: The Critical Role of Top Management and Organizational Culture (2012, background): “…have been found to inﬂuence employee information security behavior, the dominant theoretical frameworks are cognitive theories (Herath & Rao, 2009b; Myyry, Siponen, Pahnila, Vartiainen, & Vance, 2009; Bulgurcu, Cavusoglu, & Benbasat, 2010; Johnston & Warkentin, 2010) and criminological theories…”
Beyond Deterrence: An Expanded View of Employee Computer Abuse (2013, background): “…or facilitate compliance with security policies (Boss et al. 2009; Bulgurcu et al. 2010; Dodge et al. 2007; Herath and Rao 2009; Johnston and Warkentin 2010; Lee and Larsen 2009; Myyry et al. 2009, Pahnila et al. 2007; Sasse et al. 2001; Siponen and Vance 2010; Straub 1990; Workman et al. 2008).”
Organizations' Information Security Policy Compliance: Stick or Carrot Approach? (2012, background): “Finally, future research could explore the interaction effects of coercive, remunerative, and normative controls in the context of information security in light of the argument that organizations in general exercise all these types of control, although the weights placed on each may vary across orga”
What Do Systems Users Have to Fear? Using Fear Appeals to Engender Threats and Fear that Motivate Protective Security Behaviors (2015, background): “Fear (Osman et al. 1994) 1.”