Why there aren't more information security research studies

By Andrew G. Kotulic, J. Clark. Information Manager (The), 2004

402 citations recorded by the source corpus.

Subfields: Information Systems, Management Information Systems

View Paper: https://www.semanticscholar.org/paper/ca943807fbd78e06c1196bc24f54a4ddec92b578

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Information Systems

1. Princely Ifinedo
2. Paul Benjamin Lowry
3. Seppo Pahnila
4. Tom L. Roberts Jr.
5. Clay Posey
6. Motaharinia Mahmood
7. Anthony Vance
8. Henri Barki

In Management Information Systems

1. N. Archer
2. Yufei Yuan
3. Tom L. Roberts Jr.
4. Paul Benjamin Lowry
5. Mikko T. Siponen
6. Motaharinia Mahmood
7. Clay Posey
8. Princely Ifinedo

Citations in the corpus

• Motivating IS security compliance: Insights from Habit and Protection Motivation Theory (2012, background): “Given the difficulties in obtaining information security-related data from companies [8], the response rate can be regarded as relatively high.”
• Understanding Nonmalicious Security Violations in the Workplace: A Composite Behavior Model (2011, methodology): “Because IS security is often seen as a very sensitive matter, prior research in this field has faced many challenges such as low survey response rates and organizations’ unwillingness to discuss security matters [49]. to overcome these difficulties, our survey used hypothetical NMSV scenarios.”
• User Participation in Information Systems Security Risk Management (2010, result): “Finally, of those targeted members who read the email, a significant percentage may have worked for organizations with policies prohibiting employees from participating in surveys in general, or security studies in particular, as was found in another security study (Kotulic and Clark 2004).”
• Employees' adherence to information security policies: An exploratory field study (2014, background): “This is a normal practice in the area of information security policies [9].”
• The Impact of Organizational Commitment on Insiders’ Motivation to Protect Organizational Information Assets (2015, background): “Because of organizations’ general unwillingness to provide academicians access to employees for research purposes, especially when the research focuses on organizational information security matters [47], self-reports afford academicians one method of obtaining data to model and understand important”
• Information systems security policy compliance: An empirical study of the effects of socialisation, influence, and cognition (2014, background): “These incentives were necessary as it is known that individuals (and organisations) are hesitant to participate in security-related surveys [25].”