{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T16:40:03Z","timestamp":1780418403963,"version":"3.54.1"},"reference-count":245,"publisher":"Informa UK Limited","issue":"6","license":[{"start":{"date-parts":[[2017,11,1]],"date-time":"2017-11-01T00:00:00Z","timestamp":1509494400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["www.tandfonline.com"],"crossmark-restriction":true},"short-container-title":["European Journal of Information Systems"],"published-print":{"date-parts":[[2017,11]]},"DOI":"10.1057\/s41303-017-0059-9","type":"journal-article","created":{"date-parts":[[2017,7,18]],"date-time":"2017-07-18T07:50:26Z","timestamp":1500364226000},"page":"605-641","update-policy":"https:\/\/doi.org\/10.1080\/tandf_crossmark_01","source":"Crossref","is-referenced-by-count":181,"title":["Organizational information security policies: a review and research framework"],"prefix":"10.1080","volume":"26","author":[{"given":"W. Alec","family":"Cram","sequence":"first","affiliation":[{"name":"Bentley University 175 Forest Street 02452 Waltham MA USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jeffrey G.","family":"Proudfoot","sequence":"additional","affiliation":[{"name":"Bentley University 175 Forest Street 02452 Waltham MA USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"John","family":"D\u2019Arcy","sequence":"additional","affiliation":[{"name":"University of Delaware 220 Purnell Hall 19716 Newark DE USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"301","published-online":{"date-parts":[[2018,2,15]]},"reference":[{"issue":"11","key":"CIT0001","doi-asserted-by":"crossref","first-page":"576","DOI":"10.17705\/1jais.00245","volume":"11","author":"Aksulu A","year":"2010","journal-title":"Journal of the Association for Information Systems"},{"key":"CIT0002","doi-asserted-by":"publisher","DOI":"10.1108\/ICS-03-2014-0018"},{"key":"CIT0003","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2006.11.004"},{"key":"CIT0004","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2008.37"},{"key":"CIT0005","doi-asserted-by":"publisher","DOI":"10.1147\/sj.471.0071"},{"issue":"2","key":"CIT0006","doi-asserted-by":"crossref","first-page":"72","DOI":"10.17705\/1jais.00323","volume":"14","author":"Alter S","year":"2013","journal-title":"Journal of the Association for Information Systems"},{"key":"CIT0007","doi-asserted-by":"publisher","DOI":"10.2307\/25750694"},{"issue":"3","key":"CIT0009","first-page":"201","volume":"11","author":"Aurigemma S","year":"2015","journal-title":"Journal of Information System Security"},{"issue":"8","key":"CIT0011","first-page":"154","volume":"34","author":"Bandara W","year":"2015","journal-title":"Communications of the Association for Information Systems"},{"key":"CIT0012","doi-asserted-by":"publisher","DOI":"10.2307\/249677"},{"key":"CIT0014","doi-asserted-by":"publisher","DOI":"10.1145\/2487222.2487225"},{"key":"CIT0015","doi-asserted-by":"publisher","DOI":"10.1108\/ITP-11-2011-0068"},{"key":"CIT0016","doi-asserted-by":"publisher","DOI":"10.1108\/09576050210447019"},{"key":"CIT0017","doi-asserted-by":"publisher","DOI":"10.1016\/j.telpol.2009.09.001"},{"key":"CIT0018","doi-asserted-by":"publisher","DOI":"10.1145\/1525880.1525882"},{"key":"CIT0019","doi-asserted-by":"crossref","first-page":"396","DOI":"10.1017\/CBO9780511777899.014","volume-title":"Organizational Control","author":"Bijlsma-Frankema KM","year":"2010"},{"key":"CIT0020","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ\/2015\/39.4.5"},{"key":"CIT0021","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.8"},{"key":"CIT0022","doi-asserted-by":"publisher","DOI":"10.2307\/25750690"},{"key":"CIT0024","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2014.31"},{"key":"CIT0025","doi-asserted-by":"publisher","DOI":"10.1111\/psj.12000"},{"key":"CIT0026","doi-asserted-by":"publisher","DOI":"10.1080\/15536548.2005.10855772"},{"key":"CIT0027","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2014.1001257"},{"key":"CIT0028","doi-asserted-by":"publisher","DOI":"10.2753\/MIS0742-1222290305"},{"key":"CIT0029","doi-asserted-by":"publisher","DOI":"10.1080\/08874417.2015.11645767"},{"key":"CIT0030","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ\/2016\/40.1.09"},{"key":"CIT0032","doi-asserted-by":"publisher","DOI":"10.1287\/isre.14.3.291.16563"},{"issue":"25","key":"CIT0033","first-page":"510","volume":"37","author":"Chu AMY","year":"2015","journal-title":"Communications of the AIS"},{"issue":"2","key":"CIT0035","doi-asserted-by":"crossref","first-page":"577","DOI":"10.2307\/41703468","volume":"36","author":"Chua CEH","year":"2012","journal-title":"MIS Quarterly"},{"key":"CIT0036","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12059"},{"issue":"4","key":"CIT0037","doi-asserted-by":"crossref","first-page":"216","DOI":"10.17705\/1jais.00427","volume":"17","author":"Cram WA","year":"2016","journal-title":"Journal of the Association for Information Systems"},{"issue":"3","key":"CIT0039","first-page":"3","volume":"5","author":"Crossler RE","year":"2009","journal-title":"Journal of Information System Security"},{"key":"CIT0041","doi-asserted-by":"publisher","DOI":"10.2308\/isys-50704"},{"key":"CIT0042","doi-asserted-by":"publisher","DOI":"10.2307\/20650322"},{"key":"CIT0043","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-2012-0459"},{"key":"CIT0044","doi-asserted-by":"publisher","DOI":"10.1111\/j.1540-5915.2012.00383.x"},{"key":"CIT0045","doi-asserted-by":"publisher","DOI":"10.1108\/IMCS-08-2013-0057"},{"key":"CIT0046","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2011.23"},{"key":"CIT0047","doi-asserted-by":"publisher","DOI":"10.2753\/MIS0742-1222310210"},{"key":"CIT0048","doi-asserted-by":"publisher","DOI":"10.1145\/1290958.1290971"},{"key":"CIT0049","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1070.0160"},{"key":"CIT0050","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-4048(02)01006-4"},{"key":"CIT0051","volume-title":"Industrial Organization and Management","author":"Davis RC","year":"1940"},{"key":"CIT0052","volume-title":"Managing Information Security","author":"Dhillon G","year":"1997"},{"key":"CIT0053","doi-asserted-by":"publisher","DOI":"10.1145\/341852.341877"},{"key":"CIT0054","doi-asserted-by":"publisher","DOI":"10.1046\/j.1365-2575.2001.00099.x"},{"key":"CIT0056","first-page":"3","volume-title":"Institutional patterns and organizations","author":"Dimaggio PJ","year":"1988"},{"key":"CIT0057","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365-2575.2007.00289.x"},{"issue":"7","key":"CIT0058","doi-asserted-by":"crossref","first-page":"386","DOI":"10.17705\/1jais.00133","volume":"8","author":"Dinev T","year":"2007","journal-title":"Journal of the Association for Information Systems"},{"key":"CIT0059","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2009.05.003"},{"key":"CIT0060","doi-asserted-by":"publisher","DOI":"10.4018\/irmj.2005100102"},{"key":"CIT0061","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2005.09.009"},{"key":"CIT0062","doi-asserted-by":"publisher","DOI":"10.1287\/mnsc.31.2.134"},{"issue":"1","key":"CIT0063","doi-asserted-by":"crossref","first-page":"57","DOI":"10.5465\/amr.1989.4279003","volume":"14","author":"Eisenhardt KM","year":"1989","journal-title":"Academy of Management Review"},{"key":"CIT0064","doi-asserted-by":"publisher","DOI":"10.1016\/j.jbusres.2012.05.006"},{"key":"CIT0065","doi-asserted-by":"publisher","DOI":"10.1016\/0361-3682(85)90030-3"},{"key":"CIT0067","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-2011-0421"},{"key":"CIT0068","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2015.9"},{"key":"CIT0069","doi-asserted-by":"publisher","DOI":"10.1108\/09685220310480381"},{"key":"CIT0070","doi-asserted-by":"publisher","DOI":"10.1016\/S1386-5056(98)00022-7"},{"key":"CIT0071","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2010.10.002"},{"key":"CIT0072","doi-asserted-by":"publisher","DOI":"10.1109\/TPC.2014.2374011"},{"key":"CIT0073","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1080.0205"},{"key":"CIT0074","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2011.41"},{"key":"CIT0075","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ\/2013\/37.4.10"},{"key":"CIT0076","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-4048(97)00009-6"},{"key":"CIT0078","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2012.08.001"},{"key":"CIT0079","doi-asserted-by":"publisher","DOI":"10.2753\/MIS0742-1222280208"},{"key":"CIT0081","doi-asserted-by":"publisher","DOI":"10.2307\/249656"},{"key":"CIT0084","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2011.06.001"},{"key":"CIT0085","doi-asserted-by":"publisher","DOI":"10.1037\/0022-3514.83.3.752"},{"key":"CIT0086","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365-2575.2012.00420.x"},{"key":"CIT0087","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2009.02.005"},{"key":"CIT0088","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.6"},{"key":"CIT0089","doi-asserted-by":"publisher","DOI":"10.1145\/1805974.1805982"},{"issue":"3","key":"CIT0090","doi-asserted-by":"crossref","first-page":"450","DOI":"10.5465\/amr.1978.4305727","volume":"3","author":"Hofstede G","year":"1978","journal-title":"Academy of Management Review"},{"key":"CIT0091","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-4048(02)00504-7"},{"key":"CIT0092","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(02)06011-7"},{"key":"CIT0093","doi-asserted-by":"publisher","DOI":"10.1108\/09685220610655861"},{"key":"CIT0095","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2011.12.005"},{"key":"CIT0096","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2015.0569"},{"key":"CIT0097","doi-asserted-by":"publisher","DOI":"10.1111\/j.1540-5915.2012.00361.x"},{"key":"CIT0098","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2014.1001255"},{"key":"CIT0099","doi-asserted-by":"publisher","DOI":"10.1145\/1953122.1953142"},{"key":"CIT0100","doi-asserted-by":"publisher","DOI":"10.1108\/OIR-11-2015-0358"},{"key":"CIT0101","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.10.007"},{"key":"CIT0102","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2013.10.001"},{"key":"CIT0103","doi-asserted-by":"publisher","DOI":"10.1080\/10580530.2015.1117868"},{"key":"CIT0105","volume-title":"Organization Theory: Tension and Change","author":"Jaffee D","year":"1991"},{"key":"CIT0106","doi-asserted-by":"publisher","DOI":"10.1145\/383891.383894"},{"key":"CIT0107","doi-asserted-by":"publisher","DOI":"10.1016\/0304-405X(76)90026-X"},{"key":"CIT0108","doi-asserted-by":"publisher","DOI":"10.2307\/25750691"},{"key":"CIT0109","doi-asserted-by":"publisher","DOI":"10.4018\/joeuc.2010070101"},{"key":"CIT0110","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2015.15"},{"key":"CIT0111","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ\/2015\/39.1.06"},{"key":"CIT0112","doi-asserted-by":"publisher","DOI":"10.4018\/joeuc.2013010101"},{"key":"CIT0113","doi-asserted-by":"publisher","DOI":"10.1080\/10658980701744861"},{"key":"CIT0114","doi-asserted-by":"publisher","DOI":"10.1016\/S0268-4012(02)00105-6"},{"issue":"8","key":"CIT0115","doi-asserted-by":"crossref","first-page":"518","DOI":"10.17705\/1jais.00274","volume":"12","author":"Karjalainen M","year":"2011","journal-title":"Journal of the Association for Information Systems"},{"key":"CIT0116","doi-asserted-by":"publisher","DOI":"10.1108\/ICS-05-2014-0033"},{"key":"CIT0117","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2004.08.011"},{"key":"CIT0118","doi-asserted-by":"publisher","DOI":"10.1145\/2240276.2240281"},{"key":"CIT0119","doi-asserted-by":"crossref","first-page":"437","DOI":"10.1007\/978-3-319-20765-0_25","volume-title":"Healthcare information management systems","author":"Kiel JM","year":"2016"},{"key":"CIT0120","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2015.09.003"},{"key":"CIT0121","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2012.03.003"},{"issue":"32","key":"CIT0122","first-page":"665","volume":"16","author":"King WR","year":"2005","journal-title":"Communications of the Association for Information Systems"},{"key":"CIT0123","doi-asserted-by":"publisher","DOI":"10.1287\/isre.8.3.215"},{"key":"CIT0124","doi-asserted-by":"publisher","DOI":"10.1287\/orsc.1090.0458"},{"issue":"5","key":"CIT0125","first-page":"66","volume":"13","author":"Knapp KJ","year":"2012","journal-title":"Journal of Management Policy and Practice"},{"key":"CIT0126","doi-asserted-by":"publisher","DOI":"10.1108\/09685220610648355"},{"key":"CIT0127","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2009.07.001"},{"key":"CIT0128","doi-asserted-by":"publisher","DOI":"10.1093\/idpl\/ipu023"},{"key":"CIT0129","doi-asserted-by":"crossref","DOI":"10.1201\/9781315372785","volume-title":"Information Security Policies, Procedures, and Standards","author":"Landoll DJ","year":"2016"},{"issue":"4","key":"CIT0130","doi-asserted-by":"crossref","first-page":"691","DOI":"10.5465\/amr.1999.2553248","volume":"24","author":"Langley A","year":"1999","journal-title":"Academy of Management Review"},{"key":"CIT0131","doi-asserted-by":"crossref","first-page":"2978","DOI":"10.1109\/HICSS.2013.192","volume-title":"46th Hawaii International Conference on System Sciences","author":"Lebek B","year":"2013"},{"key":"CIT0132","doi-asserted-by":"publisher","DOI":"10.1108\/MRR-04-2013-0085"},{"key":"CIT0133","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.02.004"},{"key":"CIT0134","doi-asserted-by":"publisher","DOI":"10.1108\/09685220210424104"},{"key":"CIT0135","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2003.08.008"},{"key":"CIT0136","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.11"},{"key":"CIT0137","doi-asserted-by":"publisher","DOI":"10.2307\/25148735"},{"key":"CIT0138","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12037"},{"key":"CIT0139","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2009.12.005"},{"key":"CIT0140","doi-asserted-by":"publisher","DOI":"10.1145\/1379759.1379760"},{"key":"CIT0141","doi-asserted-by":"publisher","DOI":"10.2307\/20650279"},{"issue":"7","key":"CIT0142","doi-asserted-by":"crossref","first-page":"394","DOI":"10.17705\/1jais.00232","volume":"11","author":"Liang H","year":"2010","journal-title":"Journal of the Association for Information Systems"},{"key":"CIT0143","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1120.0427"},{"issue":"2","key":"CIT0144","doi-asserted-by":"crossref","first-page":"49","DOI":"10.1080\/08874417.2009.11645384","volume":"50","author":"Liao Q","year":"2009","journal-title":"Journal of Computer Information Systems"},{"key":"CIT0145","doi-asserted-by":"publisher","DOI":"10.1080\/00031305.1993.10475983"},{"issue":"4","key":"CIT0146","first-page":"557","volume":"10","author":"LIU C-C","year":"2015","journal-title":"European Journal of Information Systems"},{"key":"CIT0148","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12043"},{"key":"CIT0149","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12063"},{"key":"CIT0150","doi-asserted-by":"publisher","DOI":"10.1007\/s10551-013-1705-3"},{"key":"CIT0151","volume-title":"Management Accounting and Control Systems: An Organizational and Behavioral Approach","author":"Macintosh NB","year":"1994"},{"key":"CIT0152","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1090.0238"},{"key":"CIT0153","doi-asserted-by":"publisher","DOI":"10.1145\/1178618.1178620"},{"key":"CIT0155","doi-asserted-by":"publisher","DOI":"10.1086\/226550"},{"key":"CIT0156","doi-asserted-by":"publisher","DOI":"10.1177\/1476127007079958"},{"key":"CIT0158","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2016.0619"},{"key":"CIT0159","doi-asserted-by":"publisher","DOI":"10.2307\/25148722"},{"key":"CIT0160","doi-asserted-by":"publisher","DOI":"10.1080\/08874417.2016.1153922"},{"key":"CIT0161","doi-asserted-by":"publisher","DOI":"10.1007\/s10796-007-9050-7"},{"key":"CIT0162","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.10"},{"key":"CIT0163","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2008.11.010"},{"key":"CIT0164","doi-asserted-by":"publisher","DOI":"10.2307\/256591"},{"key":"CIT0165","doi-asserted-by":"publisher","DOI":"10.5325\/jinfopoli.3.2013.0030"},{"key":"CIT0166","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2012.04.004"},{"key":"CIT0167","doi-asserted-by":"publisher","DOI":"10.1057\/s41303-016-0020-3"},{"key":"CIT0168","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2014.08.008"},{"key":"CIT0169","doi-asserted-by":"publisher","DOI":"10.1108\/09685221211267648"},{"key":"CIT0170","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2003.11045759"},{"key":"CIT0171","volume-title":"Complex Organizations","author":"Perrow C","year":"1986"},{"issue":"1","key":"CIT0172","first-page":"3","volume":"8","author":"Phelps DC","year":"2012","journal-title":"Journal of Information System Security"},{"key":"CIT0173","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.05.002"},{"issue":"1","key":"CIT0174","first-page":"24","volume":"7","author":"Posey C","year":"2011","journal-title":"Journal of Information System Security"},{"key":"CIT0175","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2015.1138374"},{"key":"CIT0176","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ\/2013\/37.4.09"},{"key":"CIT0177","doi-asserted-by":"publisher","DOI":"10.2307\/25750704"},{"key":"CIT0179","doi-asserted-by":"publisher","DOI":"10.1145\/792704.792706"},{"key":"CIT0181","doi-asserted-by":"publisher","DOI":"10.1108\/09685221211267666"},{"key":"CIT0182","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2009.05.008"},{"key":"CIT0183","doi-asserted-by":"publisher","DOI":"10.1037\/0033-2909.132.1.1"},{"issue":"6","key":"CIT0184","first-page":"1","volume":"6","author":"Ross SJ","year":"2015","journal-title":"ISACA Journal"},{"key":"CIT0185","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2014.7"},{"key":"CIT0186","doi-asserted-by":"publisher","DOI":"10.1287\/isre.6.4.303"},{"key":"CIT0187","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.10.006"},{"key":"CIT0188","doi-asserted-by":"publisher","DOI":"10.1111\/1911-3846.12102"},{"key":"CIT0189","doi-asserted-by":"publisher","DOI":"10.1145\/216504.216508"},{"key":"CIT0191","doi-asserted-by":"publisher","DOI":"10.1111\/j.1530-9134.2011.00315.x"},{"key":"CIT0192","doi-asserted-by":"publisher","DOI":"10.1145\/353323.353382"},{"issue":"12","key":"CIT0193","first-page":"286","volume":"37","author":"Schryen G","year":"2015","journal-title":"Communications of the Association for Information Systems"},{"key":"CIT0194","doi-asserted-by":"publisher","DOI":"10.2307\/2392880"},{"issue":"3","key":"CIT0195","doi-asserted-by":"crossref","first-page":"758","DOI":"10.5465\/amr.1997.9708210725","volume":"22","author":"Sharma A","year":"1997","journal-title":"Academy of Management Review"},{"key":"CIT0196","doi-asserted-by":"publisher","DOI":"10.1080\/10447318.2016.1183862"},{"key":"CIT0197","doi-asserted-by":"publisher","DOI":"10.1108\/09685221111143042"},{"key":"CIT0200","doi-asserted-by":"publisher","DOI":"10.1108\/09685220010371394"},{"key":"CIT0201","doi-asserted-by":"publisher","DOI":"10.1145\/1145287.1145316"},{"issue":"7","key":"CIT0202","doi-asserted-by":"crossref","first-page":"445","DOI":"10.17705\/1jais.00095","volume":"7","author":"Siponen M","year":"2006","journal-title":"Journal of the Association for Information Systems"},{"key":"CIT0203","doi-asserted-by":"publisher","DOI":"10.1145\/1610252.1610289"},{"key":"CIT0204","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2013.08.006"},{"key":"CIT0205","doi-asserted-by":"publisher","DOI":"10.1145\/1216218.1216224"},{"key":"CIT0206","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2010.35"},{"key":"CIT0207","doi-asserted-by":"publisher","DOI":"10.2307\/25750688"},{"key":"CIT0208","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2012.59"},{"key":"CIT0209","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2008.12.007"},{"key":"CIT0210","first-page":"1","volume-title":"International Conference on Information Systems","author":"Siponen M","year":"2008"},{"key":"CIT0211","doi-asserted-by":"publisher","DOI":"10.2307\/25750687"},{"key":"CIT0212","doi-asserted-by":"publisher","DOI":"10.1108\/IMCS-08-2012-0045"},{"key":"CIT0213","doi-asserted-by":"publisher","DOI":"10.1108\/ICS-04-2014-0025"},{"key":"CIT0214","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2011.07.002"},{"key":"CIT0215","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2015.12.005"},{"key":"CIT0216","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2015.11.009"},{"key":"CIT0217","doi-asserted-by":"publisher","DOI":"10.2307\/25750689"},{"key":"CIT0218","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365-2575.2011.00378.x"},{"key":"CIT0219","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2004.07.001"},{"key":"CIT0220","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1.3.255"},{"key":"CIT0221","doi-asserted-by":"publisher","DOI":"10.2307\/249307"},{"key":"CIT0222","doi-asserted-by":"publisher","DOI":"10.2307\/249551"},{"issue":"5","key":"CIT0223","first-page":"23","volume":"11","author":"Susanto H","year":"2011","journal-title":"International Journal of Electrical and Computer Sciences"},{"key":"CIT0224","doi-asserted-by":"publisher","DOI":"10.1007\/s10799-015-0252-2"},{"key":"CIT0225","doi-asserted-by":"publisher","DOI":"10.2307\/2390857"},{"key":"CIT0226","doi-asserted-by":"publisher","DOI":"10.4018\/jgim.2015010103"},{"issue":"4","key":"CIT0227","first-page":"3","volume":"6","author":"THOMSON K-L","year":"2010","journal-title":"Journal of Information System Security"},{"key":"CIT0228","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.1998.11518203"},{"key":"CIT0229","doi-asserted-by":"publisher","DOI":"10.2753\/MIS0742-1222260301"},{"issue":"4","key":"CIT0230","doi-asserted-by":"crossref","first-page":"759","DOI":"10.5465\/amr.1999.2553252","volume":"24","author":"Tsang EWK","year":"1999","journal-title":"Academy of Management Review"},{"issue":"1","key":"CIT0232","first-page":"36","volume":"6","author":"Tsohou A","year":"2010","journal-title":"Journal of Information System Security"},{"key":"CIT0233","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2013.27"},{"issue":"4","key":"CIT0234","first-page":"875","volume":"76","author":"Twenge JM","year":"2008","journal-title":"Journal of Personality and Social Psychology"},{"key":"CIT0235","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2012.09.018"},{"key":"CIT0236","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.08.003"},{"key":"CIT0237","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2007.05.003"},{"key":"CIT0238","doi-asserted-by":"publisher","DOI":"10.1111\/j.1744-6570.2009.01145.x"},{"issue":"10","key":"CIT0239","doi-asserted-by":"crossref","first-page":"679","DOI":"10.17705\/1jais.00375","volume":"15","author":"Vance A","year":"2014","journal-title":"Journal of the Association for Information Systems"},{"key":"CIT0240","doi-asserted-by":"publisher","DOI":"10.2753\/MIS0742-1222290410"},{"key":"CIT0241","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ\/2015\/39.2.04"},{"key":"CIT0242","doi-asserted-by":"publisher","DOI":"10.4018\/joeuc.2012010102"},{"key":"CIT0243","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2012.04.002"},{"issue":"9","key":"CIT0245","first-page":"205","volume":"37","author":"VOM Brocke J","year":"2015","journal-title":"Communications of the Association for Information Systems"},{"key":"CIT0246","doi-asserted-by":"publisher","DOI":"10.1145\/229403.229410"},{"key":"CIT0247","doi-asserted-by":"publisher","DOI":"10.1108\/09685229910255223"},{"key":"CIT0248","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2004.01.012"},{"key":"CIT0249","doi-asserted-by":"publisher","DOI":"10.1057\/sj.2012.1"},{"issue":"1","key":"CIT0250","doi-asserted-by":"crossref","first-page":"39","DOI":"10.17705\/1jais.00420","volume":"17","author":"Wall JD","year":"2016","journal-title":"Journal of the Association for Information Systems"},{"key":"CIT0251","doi-asserted-by":"publisher","DOI":"10.1080\/15536548.2013.10845690"},{"issue":"1","key":"CIT0252","first-page":"257","volume":"37","author":"Wall JD","year":"2015","journal-title":"Communications of the Association for Information Systems"},{"key":"CIT0253","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2010.72"},{"issue":"3","key":"CIT0255","doi-asserted-by":"crossref","first-page":"194","DOI":"10.17705\/1jais.00424","volume":"17","author":"Warkentin M","year":"2016","journal-title":"Journal of the Association for Information Systems"},{"key":"CIT0256","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.1992.2"},{"key":"CIT0259","first-page":"123","volume-title":"Information security: Policy, processes, and practices","author":"Whitman ME","year":"2008"},{"key":"CIT0260","first-page":"10","volume-title":"Information security management: Global challenges in the new millennium","author":"Whitman ME","year":"2001"},{"key":"CIT0261","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2005.03.008"},{"key":"CIT0262","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ\/2016\/40.3.11"},{"key":"CIT0263","doi-asserted-by":"publisher","DOI":"10.1016\/j.infoandorg.2006.08.001"},{"key":"CIT0264","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.ejis.3000592"},{"key":"CIT0265","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ\/2013\/37.1.01"},{"key":"CIT0266","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(82)90006-2"},{"key":"CIT0267","doi-asserted-by":"publisher","DOI":"10.1016\/j.infoandorg.2009.06.001"},{"key":"CIT0268","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2008.04.005"},{"key":"CIT0269","doi-asserted-by":"publisher","DOI":"10.1002\/asi.20474"},{"key":"CIT0270","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1090.0266"},{"issue":"34","key":"CIT0272","first-page":"557","volume":"24","author":"Zafar H","year":"2009","journal-title":"Communications of the AIS"},{"key":"CIT0273","doi-asserted-by":"publisher","DOI":"10.1108\/09685220910993980"},{"key":"CIT0274","doi-asserted-by":"publisher","DOI":"10.1145\/1108906.1108908"},{"key":"CIT0275","doi-asserted-by":"publisher","DOI":"10.1111\/j.1745-493X.2003.tb00156.x"}],"container-title":["European Journal of Information Systems"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/article\/10.1057\/s41303-017-0059-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1057\/s41303-017-0059-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.tandfonline.com\/doi\/pdf\/10.1057\/s41303-017-0059-9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1057\/s41303-017-0059-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,24]],"date-time":"2025-06-24T14:25:40Z","timestamp":1750775140000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.tandfonline.com\/doi\/full\/10.1057\/s41303-017-0059-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,11]]},"references-count":245,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2018,2,15]]},"published-print":{"date-parts":[[2017,11]]}},"alternative-id":["10.1057\/s41303-017-0059-9"],"URL":"https:\/\/doi.org\/10.1057\/s41303-017-0059-9","relation":{},"ISSN":["0960-085X","1476-9344"],"issn-type":[{"value":"0960-085X","type":"print"},{"value":"1476-9344","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,11]]},"assertion":[{"value":"The publishing and review policy for this title is described in its Aims & Scope.","order":1,"name":"peerreview_statement","label":"Peer Review Statement"},{"value":"http:\/\/www.tandfonline.com\/action\/journalInformation?show=aimsScope&journalCode=tjis20","URL":"http:\/\/www.tandfonline.com\/action\/journalInformation?show=aimsScope&journalCode=tjis20","order":2,"name":"aims_and_scope_url","label":"Aim & Scope"}]}}