A conceptual foundation for organizational information security awareness

By Mikko T. Siponen. Information Management & Computer Security, 2000

722 citations recorded by the source corpus.

Subfields: Computer Networks and Communications, Information Systems, Sociology and Political Science

View Paper: https://www.semanticscholar.org/paper/db4eb7ac502d9cf6cea7e050478c6b018241d54d

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

In Information Systems

In Sociology and Political Science

Citations in the corpus

Understanding Nonmalicious Security Violations in the Workplace: A Composite Behavior Model (2011, background): “…What factors motivate end users to engage in such behaviors? the role of motivation has not been considered seriously in the IS security literature [75] and our understanding of the factors that motivate those undesirable user behaviors is still very limited. to fill this gap, the current study…”
An integrative model of computer abuse based on social control and general deterrence theories (2004, background): “…abuse through SDI based on GDT, which (SDI) reduces insiders’ and invaders’ abuse; (2) organizational trust factors and computer abuse through ICI based on the SCT, which imply that the higher the level of organizational trust, the less likely it is for insiders to be involved in computer abuse.”
Organizations' Information Security Policy Compliance: Stick or Carrot Approach? (2012, background): “Organizational security culture was also included as a control variable because of potential differences in security policy compliance among employees in different organizations [7, 16, 60].”
User Participation in Information Systems Security Risk Management (2010, background): “The IS security literature typically portrays users as the weak link in security, either from mistakes or computer crimes (e.g., Dhillon and Moores 2001; Siponen 2000b; Wade 2004).”
Fear Appeals and Information Security Behaviors: An Empirical Study (2010, background): “IT professionals strive to instill a consistent approach to assurance through policies and procedures that govern end user computing (Straub and Welke 1998; Siponen 2000).”
Why people keep coming back to Facebook: Explaining and predicting continuance participation from an extended theory of planned behaviour perspective (2013, background): “…have embarked upon the theory of planned behaviour from multi-disciplined points of view to predict various behaviours; ranging from psychology (see [20]), sociology (see [43]), management (see [81]), marketing (see [40]), computer science (see [65]), to information systems (see [37]) disciplines.”
Which Factors Explain Employees' Adherence to Information Security Policies? An Empirical Study (2007, positive): “Aytes and Connolly (2003), Pahnila et al. (2007), Puhakainen (2006), Siponen (2000) and Siponen et al. (2007) have criticized existing information security awareness approaches as lacking not only theoretically grounded methods, but also there is no empirical evidence on their effectiveness.”
An Enhanced Fear Appeal Rhetorical Framework: Leveraging Threats to the Human Asset Through Sanctioning Rhetoric (2015, methodology): “To establish effective information security learning environments and secure organizational cultures, the effective communication of policy to all insiders is imperative (Siponen 2000).”
Information Security: 23rd International Conference, ISC 2020, Bali, Indonesia, December 16–18, 2020, Proceedings (2020, neutral): “These Security technologies and techniques give somebody misuse and exploit the vulnerable to attack and lose their usability [5], [6].”
What levels of moral reasoning and values explain adherence to information security rules? An empirical study (2009, background): “…while previous research has suggested that theories of moral reasoning can explain employee’s adherence to information security policies (Siponen, 2000, 2002), and research on psychology suggests that moral reasoning has an effect on behaviour in general (Blasi, 1980) and policy…”
Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness (2009, background): “Deterrence theory Siponen [57] Conceptual foundation fororganizational information security.”