{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,22]],"date-time":"2026-02-22T10:31:20Z","timestamp":1771756280962,"version":"3.50.1"},"reference-count":285,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2024,7,31]],"date-time":"2024-07-31T00:00:00Z","timestamp":1722384000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGMIS Database"],"published-print":{"date-parts":[[2024,8]]},"abstract":"<jats:p>Information security continues to grow in importance in all aspects of society and therefore evolves as a prevalent research area. The information systems (IS) discipline offers a unique perspective to move this stream of literature forward. Using a semiautomated thematic analysis approach based on the topic modeling technique, we review a broad range of information security literature to investigate how we may integrate and advance our understanding of information security. Our analysis reveals four major themes, including information security policy (ISP) compliance, motivations and susceptibility, software security decisions, and firm security strategy. We also identify a theme of security in broader contexts, in which studies consider the societal impacts of information security and online hacker behavior. This review contributes to IS literature by 1) synthesizing the broad range of information security research published in the top journals of the field, moving beyond prior reviews focusing on a narrower scope such as individual ISP compliance; 2) identifying major themes and proposing an overarching research framework encompassing these themes and their interconnections, allowing us to envision future research directions; and 3) enumerating a semiautomated topic modeling approach that other researchers can employ.<\/jats:p>","DOI":"10.1145\/3685235.3685242","type":"journal-article","created":{"date-parts":[[2024,7,31]],"date-time":"2024-07-31T13:37:15Z","timestamp":1722433035000},"page":"135-169","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Information Security Research in the Information Systems Discipline: A Thematic Review and Future Research Directions"],"prefix":"10.1145","volume":"55","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9309-551X","authenticated-orcid":false,"given":"Stephanie","family":"Totty","sequence":"first","affiliation":[{"name":"Department of Information Systems and Analytics, Middle Tennessee State University, Murfreesboro, TN, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9882-3341","authenticated-orcid":false,"given":"He","family":"Li","sequence":"additional","affiliation":[{"name":"Department of Management, Clemson University, Clemson, SC, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-5061-3580","authenticated-orcid":false,"given":"Chen","family":"Zhang","sequence":"additional","affiliation":[{"name":"Department of Information Systems and Business Analytics, Iowa State University, Ames, IA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-3918-5345","authenticated-orcid":false,"given":"Brian","family":"Janz","sequence":"additional","affiliation":[{"name":"Department of Management Information Systems, University of Memphis, Memphis, TN, USA"}]}],"member":"320","published-online":{"date-parts":[[2024,7,31]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2020.0973"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.2307\/25750686"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.1989.11517851"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1177\/0149206316678451"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1057\/s41303-017-0057-y"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.2307\/3560246"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2015.21"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2016.1243947"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2017.1394063"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.2307\/25750694"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1080.0226"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2014.0527"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1070.0142"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00583"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.1996.7"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.2307\/25148767"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.2307\/249677"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00506"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/s0963--8687(02)00018--5"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2017.0714"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2016.1205918"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222280303"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1057\/jit.1992.7"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.2307\/4132323"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.2307\/248920"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.8"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.2307\/25750690"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2019.0860"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2022.1133"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2017.1387712"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1050.0041"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1080.0180"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222250211"},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00567"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2014.1001257"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.2307\/23044049"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1120.0451"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2021.1014"},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222290305"},{"key":"e_1_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3487923.3487932"},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2015.0601"},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1080\/13501763.2011.586793"},{"key":"e_1_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1057\/s41303-017-0059--9"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12319"},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222260308"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00463"},{"key":"e_1_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.jit.2000006"},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2011.23"},{"key":"e_1_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222310210"},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1070.0160"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12173"},{"key":"e_1_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2020.0939"},{"key":"e_1_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00740"},{"key":"e_1_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2008.42"},{"key":"e_1_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.17705\/1CAIS.03907"},{"key":"e_1_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222290204"},{"key":"e_1_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1046\/j.1365--2575.2001.00099.x"},{"key":"e_1_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2021.101693"},{"key":"e_1_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00595"},{"key":"e_1_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365--2575.2006.00219.x"},{"key":"e_1_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2020.1797546"},{"key":"e_1_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365--2575.2007.00289.x"},{"key":"e_1_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00133"},{"key":"e_1_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2007.05.005"},{"key":"e_1_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2021.1978344"},{"key":"e_1_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1080\/0268396032000101153"},{"key":"e_1_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222290409"},{"key":"e_1_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.2753\/MIS0742--1222220305"},{"key":"e_1_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00581"},{"key":"e_1_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.ejis.3000687"},{"key":"e_1_2_1_79_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2015.9"},{"key":"e_1_2_1_80_1","unstructured":"Fruhlinger J. (2020 February 12). Equifax data breach FAQ: What happened who was affected what was the impact? CSO. https:\/\/www.csoonline.com\/article\/3444488\/equifax-data-breach-faq-what-happened-who-was-affected-what-was-the-impact.html"},{"key":"e_1_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1050.0053"},{"key":"e_1_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.2307\/25750693"},{"key":"e_1_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1070.0112"},{"key":"e_1_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.10.3.233"},{"key":"e_1_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2022.2096491"},{"key":"e_1_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_87_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2010.10.002"},{"key":"e_1_2_1_88_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00447"},{"key":"e_1_2_1_89_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00275"},{"key":"e_1_2_1_90_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_91_1","doi-asserted-by":"publisher","DOI":"10.2307\/25750692"},{"key":"e_1_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12202"},{"key":"e_1_2_1_93_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2016.1172440"},{"key":"e_1_2_1_94_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222280208"},{"key":"e_1_2_1_95_1","doi-asserted-by":"publisher","DOI":"10.2307\/41703500"},{"key":"e_1_2_1_96_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12257"},{"key":"e_1_2_1_97_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2020.0986"},{"key":"e_1_2_1_98_1","doi-asserted-by":"publisher","DOI":"10.2307\/249656"},{"key":"e_1_2_1_99_1","doi-asserted-by":"publisher","DOI":"10.5465\/AMR.2007.26586096"},{"key":"e_1_2_1_100_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2011.06.001"},{"key":"e_1_2_1_101_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222250310"},{"key":"e_1_2_1_102_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365--2575.2012.00420.x"},{"key":"e_1_2_1_103_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.6"},{"key":"e_1_2_1_104_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2016.1205924"},{"key":"e_1_2_1_105_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_106_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2021.1908184"},{"key":"e_1_2_1_107_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.7"},{"key":"e_1_2_1_108_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1110.0393"},{"key":"e_1_2_1_109_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2015.0569"},{"key":"e_1_2_1_110_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2007.05.004"},{"key":"e_1_2_1_111_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2014.1001255"},{"key":"e_1_2_1_112_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2012.10.004"},{"key":"e_1_2_1_113_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222290304"},{"key":"e_1_2_1_114_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2018.0806"},{"key":"e_1_2_1_115_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_116_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12317"},{"key":"e_1_2_1_117_1","doi-asserted-by":"publisher","DOI":"10.2307\/249676"},{"key":"e_1_2_1_118_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2018.09.003"},{"key":"e_1_2_1_119_1","doi-asserted-by":"publisher","DOI":"10.1057\/jit.1990.15"},{"key":"e_1_2_1_120_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2016.0644"},{"key":"e_1_2_1_121_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00660"},{"key":"e_1_2_1_122_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2017.1334499"},{"key":"e_1_2_1_123_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2020.1793696"},{"key":"e_1_2_1_124_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2022.2096551"},{"key":"e_1_2_1_125_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2016.0677"},{"key":"e_1_2_1_126_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222250205"},{"key":"e_1_2_1_127_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00533"},{"key":"e_1_2_1_128_1","doi-asserted-by":"publisher","DOI":"10.2307\/25750691"},{"key":"e_1_2_1_129_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2015.15"},{"key":"e_1_2_1_130_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_131_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.41"},{"key":"e_1_2_1_132_1","doi-asserted-by":"publisher","DOI":"10.17705\/2msqe.00008"},{"key":"e_1_2_1_133_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2018.0827"},{"key":"e_1_2_1_134_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00274"},{"key":"e_1_2_1_135_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00184"},{"key":"e_1_2_1_136_1","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.ejis.3000711"},{"key":"e_1_2_1_137_1","doi-asserted-by":"publisher","DOI":"10.2753\/MIS0742--1222240304"},{"key":"e_1_2_1_138_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222240401"},{"key":"e_1_2_1_139_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2015.16"},{"key":"e_1_2_1_140_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12338"},{"key":"e_1_2_1_141_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_142_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2019.0858"},{"key":"e_1_2_1_143_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2016.08.005"},{"key":"e_1_2_1_144_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2022.2088414"},{"key":"e_1_2_1_145_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222250210"},{"key":"e_1_2_1_146_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00580"},{"key":"e_1_2_1_147_1","doi-asserted-by":"publisher","DOI":"10.2753\/MIS0742--1222300202"},{"key":"e_1_2_1_148_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_149_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_150_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2019.101579"},{"key":"e_1_2_1_151_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1120.0447"},{"key":"e_1_2_1_152_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2015.0607"},{"key":"e_1_2_1_153_1","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.ejis.3000449"},{"key":"e_1_2_1_154_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.1995.11518075"},{"key":"e_1_2_1_155_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00678"},{"key":"e_1_2_1_156_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12037"},{"key":"e_1_2_1_157_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2021.1870390"},{"key":"e_1_2_1_158_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2022.2063549"},{"key":"e_1_2_1_159_1","doi-asserted-by":"publisher","DOI":"10.2307\/20650279"},{"key":"e_1_2_1_160_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00232"},{"key":"e_1_2_1_161_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_162_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2020.1790190"},{"key":"e_1_2_1_163_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10551-018--3806--5"},{"key":"e_1_2_1_164_1","doi-asserted-by":"publisher","DOI":"10.2307\/249574"},{"key":"e_1_2_1_165_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12043"},{"key":"e_1_2_1_166_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12063"},{"key":"e_1_2_1_167_1","doi-asserted-by":"publisher","DOI":"10.1057\/jit.2015.18"},{"key":"e_1_2_1_168_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.000646"},{"key":"e_1_2_1_169_1","doi-asserted-by":"publisher","DOI":"10.1057\/jit.2012.20"},{"key":"e_1_2_1_170_1","doi-asserted-by":"publisher","DOI":"10.1002\/smj.2596"},{"issue":"3","key":"e_1_2_1_171_1","first-page":"237","article-title":"Challenges and best practices in information security management","volume":"17","author":"McLaughlin M.-D.","year":"2018","unstructured":"McLaughlin, M.-D., & Gogan, J. (2018). Challenges and best practices in information security management. MIS Quarterly Executive, 17(3), 237--262. https:\/\/aisel.aisnet.org\/misqe\/vol17\/iss3\/6","journal-title":"MIS Quarterly Executive"},{"key":"e_1_2_1_172_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1110.0361"},{"key":"e_1_2_1_173_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2017.1394083"},{"key":"e_1_2_1_174_1","doi-asserted-by":"publisher","DOI":"10.2307\/3560240"},{"key":"e_1_2_1_175_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2015.0587"},{"key":"e_1_2_1_176_1","doi-asserted-by":"publisher","DOI":"10.1057\/s41303-017-0058-x"},{"key":"e_1_2_1_177_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_178_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1100.0341"},{"key":"e_1_2_1_179_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2016.07.007"},{"key":"e_1_2_1_180_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00723"},{"key":"e_1_2_1_181_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.10"},{"key":"e_1_2_1_182_1","doi-asserted-by":"publisher","DOI":"10.17705\/1CAIS.05015"},{"key":"e_1_2_1_183_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2020.1771222"},{"key":"e_1_2_1_184_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2021.1962601"},{"key":"e_1_2_1_185_1","doi-asserted-by":"publisher","DOI":"10.1057\/s41303-016-0025-y"},{"key":"e_1_2_1_186_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085x.2019.1624141"},{"key":"e_1_2_1_187_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2012.3"},{"key":"e_1_2_1_188_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2013.18"},{"key":"e_1_2_1_189_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00586"},{"key":"e_1_2_1_190_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2022.101707"},{"key":"e_1_2_1_191_1","doi-asserted-by":"publisher","DOI":"10.2307\/25148783"},{"key":"e_1_2_1_192_1","doi-asserted-by":"publisher","DOI":"10.1046\/j.1365--2575.2002.00118.x"},{"key":"e_1_2_1_193_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2017.1393304"},{"key":"e_1_2_1_194_1","doi-asserted-by":"publisher","DOI":"10.1057\/jit.1998.6"},{"key":"e_1_2_1_195_1","doi-asserted-by":"publisher","DOI":"10.1177\/0268396220918594"},{"key":"e_1_2_1_196_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222250206"},{"key":"e_1_2_1_197_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222260205"},{"key":"e_1_2_1_198_1","doi-asserted-by":"publisher","DOI":"10.2307\/258559"},{"key":"e_1_2_1_199_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2015.1138374"},{"key":"e_1_2_1_200_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_201_1","doi-asserted-by":"publisher","DOI":"10.2307\/25750704"},{"key":"e_1_2_1_202_1","volume-title":"PwC's 25th Annual Global CEO Survey: Reimagining the outcomes that matter. https:\/\/www.pwc.com\/gx\/en\/ceo-survey\/2022\/main\/content\/downloads\/25th_CEO_Survey.pdf","author":"Pw C.","year":"2022","unstructured":"PwC. (2022). PwC's 25th Annual Global CEO Survey: Reimagining the outcomes that matter. https:\/\/www.pwc.com\/gx\/en\/ceo-survey\/2022\/main\/content\/downloads\/25th_CEO_Survey.pdf"},{"key":"e_1_2_1_203_1","doi-asserted-by":"publisher","DOI":"10.1108\/ICS-03--2019-0039"},{"key":"e_1_2_1_204_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.1991.11517914"},{"key":"e_1_2_1_205_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365--2575.2007.00259.x"},{"key":"e_1_2_1_206_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1080.0174"},{"key":"e_1_2_1_207_1","doi-asserted-by":"publisher","DOI":"10.2307\/41703470"},{"key":"e_1_2_1_208_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2013.33"},{"key":"e_1_2_1_209_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2017.1394049"},{"key":"e_1_2_1_210_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_211_1","unstructured":"Sanger D. E. Krauss C. & Perlroth N. (2021 May 8). Cyberattack forces a shutdown of a top U.S. pipeline. The New York Times. https:\/\/www.nytimes.com\/2021\/05\/08\/us\/politics\/cyberattack-colonial-pipeline.html"},{"key":"e_1_2_1_212_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_213_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2020.0941"},{"key":"e_1_2_1_214_1","doi-asserted-by":"publisher","DOI":"10.2307\/25148813"},{"key":"e_1_2_1_215_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2020.1790187"},{"key":"e_1_2_1_216_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00697"},{"key":"e_1_2_1_217_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2015.1063315"},{"key":"e_1_2_1_218_1","doi-asserted-by":"publisher","DOI":"10.1016\/s0963--8687(02)00022--7"},{"key":"e_1_2_1_219_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00488"},{"key":"e_1_2_1_220_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2019.1705512"},{"key":"e_1_2_1_221_1","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.ejis.3000537"},{"key":"e_1_2_1_222_1","doi-asserted-by":"publisher","DOI":"10.2307\/25750688"},{"key":"e_1_2_1_223_1","doi-asserted-by":"publisher","DOI":"10.2307\/25750687"},{"key":"e_1_2_1_224_1","doi-asserted-by":"publisher","DOI":"10.2307\/25750689"},{"key":"e_1_2_1_225_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365--2575.2011.00378.x"},{"key":"e_1_2_1_226_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2016.0634"},{"key":"e_1_2_1_227_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.13.1.36.97"},{"key":"e_1_2_1_228_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1.3.255"},{"key":"e_1_2_1_229_1","doi-asserted-by":"publisher","DOI":"10.2307\/249551"},{"key":"e_1_2_1_230_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222220405"},{"key":"e_1_2_1_231_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00155"},{"key":"e_1_2_1_232_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222280411"},{"key":"e_1_2_1_233_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2017.0722"},{"key":"e_1_2_1_234_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2017.1398880"},{"key":"e_1_2_1_235_1","doi-asserted-by":"publisher","DOI":"10.1080\/026839699344467"},{"key":"e_1_2_1_236_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00680"},{"key":"e_1_2_1_237_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.201327"},{"key":"e_1_2_1_238_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_239_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222310108"},{"key":"e_1_2_1_240_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2014.995535"},{"key":"e_1_2_1_241_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2007.05.003"},{"key":"e_1_2_1_242_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00687"},{"key":"e_1_2_1_243_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00375"},{"key":"e_1_2_1_244_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_245_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_246_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222290410"},{"key":"e_1_2_1_247_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_248_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00607"},{"key":"e_1_2_1_249_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_250_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2018.1523531"},{"key":"e_1_2_1_251_1","doi-asserted-by":"publisher","DOI":"10.1057\/jit.2012.17"},{"key":"e_1_2_1_252_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00306"},{"key":"e_1_2_1_253_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2013.01.003"},{"key":"e_1_2_1_254_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00420"},{"key":"e_1_2_1_255_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1070.0143"},{"key":"e_1_2_1_256_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_257_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2016.0680"},{"key":"e_1_2_1_258_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_259_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1120.0437"},{"key":"e_1_2_1_260_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00424"},{"key":"e_1_2_1_261_1","volume-title":"Analyzing the past to prepare for the future: Writing a literature review. MIS Quarterly, 26(2), xiii--xxiii. www.jstor.org\/stable\/4132319","author":"Webster J.","year":"2002","unstructured":"Webster, J., & Watson, R. T. (2002). Analyzing the past to prepare for the future: Writing a literature review. MIS Quarterly, 26(2), xiii--xxiii. www.jstor.org\/stable\/4132319"},{"key":"e_1_2_1_262_1","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.ejis.3000592"},{"key":"e_1_2_1_263_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00524"},{"key":"e_1_2_1_264_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_265_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12129"},{"key":"e_1_2_1_266_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2016.1205934"},{"key":"e_1_2_1_267_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365--2575.2011.00369.x"},{"key":"e_1_2_1_268_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222270111"},{"key":"e_1_2_1_269_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00681"},{"key":"e_1_2_1_270_1","doi-asserted-by":"publisher","DOI":"10.1057\/jit.2010.4"},{"key":"e_1_2_1_271_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2022.2099767"},{"key":"e_1_2_1_272_1","doi-asserted-by":"publisher","DOI":"10.1080\/0960085X.2021.1980444"},{"key":"e_1_2_1_273_1","doi-asserted-by":"publisher","DOI":"10.1111\/isj.12271"},{"key":"e_1_2_1_274_1","doi-asserted-by":"publisher","DOI":"10.25300\/MISQ"},{"key":"e_1_2_1_275_1","doi-asserted-by":"publisher","DOI":"10.46743\/2160--3715"},{"key":"e_1_2_1_276_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222240110"},{"key":"e_1_2_1_277_1","doi-asserted-by":"publisher","DOI":"10.25300\/misq"},{"key":"e_1_2_1_278_1","doi-asserted-by":"publisher","DOI":"10.1109\/TENCONSpring.2016.7519379"},{"key":"e_1_2_1_279_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00399"},{"key":"e_1_2_1_280_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.9"},{"key":"e_1_2_1_281_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2017.0690"},{"key":"e_1_2_1_282_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2019.0919"},{"key":"e_1_2_1_283_1","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742--1222300104"},{"key":"e_1_2_1_284_1","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.ejis.3000650"},{"key":"e_1_2_1_285_1","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2020.1790185"}],"container-title":["ACM SIGMIS Database: the DATABASE for Advances in Information Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3685235.3685242","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3685235.3685242","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:06:17Z","timestamp":1750291577000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3685235.3685242"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7,31]]},"references-count":285,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2024,8]]}},"alternative-id":["10.1145\/3685235.3685242"],"URL":"https:\/\/doi.org\/10.1145\/3685235.3685242","relation":{},"ISSN":["0095-0033","1532-0936"],"issn-type":[{"value":"0095-0033","type":"print"},{"value":"1532-0936","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,7,31]]},"assertion":[{"value":"2024-07-31","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}