Improving Employees' Compliance Through Information Systems Security Training: An Action Research Study

By Petri Puhakainen, Mikko T. Siponen. MIS Q., 2010

722 citations recorded by the source corpus.

Subfields: Computer Networks and Communications, Information Systems, Management Information Systems

View Paper: https://www.semanticscholar.org/paper/e3b3048f6c2e257f6e274be2201d3087d0d2d85c

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

1. Tejaswini C. Herath
2. Seppo Pahnila
3. Allen C. Johnston
4. Merrill Warkentin
5. Mikko T. Siponen
6. Anthony Vance
7. John D'Arcy
8. Javed Ahmed

In Information Systems

1. Merrill Warkentin
2. Allen C. Johnston
3. Mikko T. Siponen
4. Seppo Pahnila
5. Tejaswini C. Herath
6. Qing Hu
7. John D'Arcy
8. Paul Benjamin Lowry

In Management Information Systems

1. Tejaswini C. Herath
2. Javed Ahmed
3. John D'Arcy
4. Paul J. Hart
5. Qing Hu
6. Mikko T. Siponen
7. Allen C. Johnston
8. Donna K. Cooke

Citations in the corpus

• Motivating IS security compliance: Insights from Habit and Protection Motivation Theory (2012, background): “A number of behavioral approaches have been proposed in the literature for either improving employees’ compliance with the security procedures of their organizations or to explain their reasons for computer abuse [16].”
• Understanding Employee Responses to Stressful Information Security Requirements: A Coping Perspective (2014, background): “T here is growing boDy of AcADeMic is securiTy liTerATure (e.g., [36, 74]), with a major emphasis on behavioral security issues (e.g., [19, 20, 42, 63, 71]) and ISP compliance in particular (e.g., [13, 14, 27, 32, 55]).”
• An Enhanced Fear Appeal Rhetorical Framework: Leveraging Threats to the Human Asset Through Sanctioning Rhetoric (2015, background): “Information security managers and other organizational executives continue to struggle with enforcing policies designed to protect assets from intentional or accidental information security violations by an organization's insiders (D'Arcy et al. 2009; Ng et al. 2009; Puhakainen and Siponen 2010).”
• Information security management needs more holistic approach: A literature review (2016, background): “…Doherty et al. (2009) Security breaches can be reduced by protecting a firm’s information through an effective information security policy Puhakainen and Siponen (2010) Information security policy compliance training has a positive effect on employees’ behaviour for compliance…”
• Managing Employee Compliance with Information Security Policies: The Critical Role of Top Management and Organizational Culture (2012, background): “Information security management initiatives, such as training programs that are designed based on such theoretical understanding, as shown in Puhakainen and Siponen (2010), are more likely to be effective than generic training programs on information security technology or policies.”