{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T15:56:02Z","timestamp":1781106962114,"version":"3.54.1"},"reference-count":47,"publisher":"IGI Global Scientific Publishing","issue":"3","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014,7]]},"abstract":"<jats:p>Drawing upon institutional theory, this article develops an extended model to test and verify the effects of external institutional pressures on Secure Software Development (SSD) assimilation and the roles of internal critical factors. The empirical results are based on 86 survey data from respondents of related organizations in United Kingdom, Hong Kong, and Mainland China who have related project experience about SSD. Results from partial least squares (PLS) analysis suggest that both mimetic and coercive pressures have indirect effects on SSD assimilation with the distal mediation of top management. Normative pressures positively affect SSD assimilation with the full mediation of secure software champion. Results also suggest that secure software champion plays another partial mediation between top management participation and SSD assimilation. This paper highlights the important role of secure software champion for its dually mediating effects on both external and internal forces during SSD assimilation process.<\/jats:p>","DOI":"10.4018\/ijsse.2014070103","type":"journal-article","created":{"date-parts":[[2014,11,6]],"date-time":"2014-11-06T09:18:04Z","timestamp":1415265484000},"page":"32-55","source":"Crossref","is-referenced-by-count":1,"title":["Secure Software Development Assimilation"],"prefix":"10.4018","volume":"5","author":[{"given":"Mingqiu","family":"Song","sequence":"first","affiliation":[{"name":"Faculty of Management and Economics, Dalian University of Technology, Dalian, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Donghao","family":"Chen","sequence":"additional","affiliation":[{"name":"Faculty of Management and Economics, Dalian University of Technology, Dalian, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Elizabeth Sylvester","family":"Mkoba","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Dalian University of Technology, Dalian, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"2432","reference":[{"key":"ijsse.2014070103-0","doi-asserted-by":"publisher","DOI":"10.1287\/isre.10.4.304"},{"key":"ijsse.2014070103-1","doi-asserted-by":"publisher","DOI":"10.1037\/0022-3514.51.6.1173"},{"key":"ijsse.2014070103-2","doi-asserted-by":"publisher","DOI":"10.2307\/249647"},{"key":"ijsse.2014070103-3","doi-asserted-by":"crossref","unstructured":"Bj\u00f6rck, F. (2004). Institutional Theory: A New Perspective for Research into IS\/IT Security in Organisations. Paper presented at the HICSS.","DOI":"10.1109\/HICSS.2004.1265444"},{"issue":"3","key":"ijsse.2014070103-4","doi-asserted-by":"crossref","DOI":"10.2307\/41703484","article-title":"A Knowledge-Based Model of Radical Innovation in Small Software Firms.","volume":"36","author":"J. L.Carlo","year":"2012","journal-title":"Management Information Systems Quarterly"},{"key":"ijsse.2014070103-5","doi-asserted-by":"publisher","DOI":"10.2307\/4132321"},{"key":"ijsse.2014070103-6","unstructured":"Chin, W. W. (1998). Commentary: Issues and opinion on structural equation modeling: JSTOR."},{"key":"ijsse.2014070103-7","doi-asserted-by":"publisher","DOI":"10.2307\/2095101"},{"key":"ijsse.2014070103-8","doi-asserted-by":"publisher","DOI":"10.1287\/isre.10.3.255"},{"key":"ijsse.2014070103-9","doi-asserted-by":"publisher","DOI":"10.2307\/3151718"},{"issue":"1","key":"ijsse.2014070103-10","first-page":"7","article-title":"Structural Equation Modeling and Regression: Guidelines for Research Practice.","volume":"4","author":"D.Gefen","year":"2000","journal-title":"Communications of the Association for Information Systems"},{"key":"ijsse.2014070103-11","doi-asserted-by":"crossref","unstructured":"Goodhue, D., Lewis, W., & Thompson, R. (2006). PLS, small sample size, and statistical power in MIS research. Paper presented at the System Sciences, 2006. HICSS'06. Proceedings of the 39th Annual Hawaii International Conference on.","DOI":"10.1109\/HICSS.2006.381"},{"key":"ijsse.2014070103-12","unstructured":"Graham, D. (2006). Introduction to the CLASP Process. Build Security In."},{"key":"ijsse.2014070103-13","doi-asserted-by":"publisher","DOI":"10.2307\/3094804"},{"key":"ijsse.2014070103-14","author":"M.Howard","year":"2009","journal-title":"The security development lifecycle"},{"key":"ijsse.2014070103-15","doi-asserted-by":"publisher","DOI":"10.2307\/2393393"},{"key":"ijsse.2014070103-16","doi-asserted-by":"crossref","unstructured":"Hsu, C., Lee, J.-N., & Straub, D. W. (2012). Institutional Influences on Information Systems Security Innovations. Information systems research, 23(3-part-2), 918-939.","DOI":"10.1287\/isre.1110.0393"},{"key":"ijsse.2014070103-17","unstructured":"Hu, Q., Dinev, T., Hart, P., & Cooke, D. (2008). Top management championship and individual behaviour towards information security: an integrative model."},{"key":"ijsse.2014070103-18","doi-asserted-by":"publisher","DOI":"10.1111\/j.1540-5915.2012.00361.x"},{"key":"ijsse.2014070103-19","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2007.05.004"},{"key":"ijsse.2014070103-20","doi-asserted-by":"publisher","DOI":"10.2307\/249382"},{"key":"ijsse.2014070103-21","doi-asserted-by":"publisher","DOI":"10.1287\/isre.5.2.139"},{"key":"ijsse.2014070103-22","doi-asserted-by":"publisher","DOI":"10.1108\/EUM0000000003526"},{"issue":"1","key":"ijsse.2014070103-23","doi-asserted-by":"crossref","first-page":"59","DOI":"10.2307\/25148781","article-title":"Assimilation of enterprise systems: The effect of institutional pressures and the mediating role of top management.","volume":"31","author":"H.Liang","year":"2007","journal-title":"Management Information Systems Quarterly"},{"key":"ijsse.2014070103-24","doi-asserted-by":"publisher","DOI":"10.1207\/s15327906mbr2301_7"},{"issue":"2","key":"ijsse.2014070103-25","first-page":"59","article-title":"Entrepreneurs, champions, and technological innovation.","volume":"21","author":"M. A.Maidique","year":"1980","journal-title":"Sloan Management Review"},{"key":"ijsse.2014070103-26","volume":"Vol. 1","author":"G.McGraw","year":"2006","journal-title":"Software security: building security in"},{"key":"ijsse.2014070103-27","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-35566-5_8"},{"key":"ijsse.2014070103-28","doi-asserted-by":"publisher","DOI":"10.1037\/0021-9010.88.5.879"},{"key":"ijsse.2014070103-29","doi-asserted-by":"publisher","DOI":"10.1177\/014920638601200408"},{"key":"ijsse.2014070103-30","doi-asserted-by":"crossref","DOI":"10.7208\/chicago\/9780226185941.001.0001","author":"W. W.Powell","year":"1991","journal-title":"The new institutionalism in organizational analysis"},{"key":"ijsse.2014070103-31","doi-asserted-by":"publisher","DOI":"10.1287\/orsc.12.2.117.10115"},{"key":"ijsse.2014070103-32","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2005.08.005"},{"issue":"1","key":"ijsse.2014070103-33","doi-asserted-by":"crossref","first-page":"127","DOI":"10.1080\/10864415.2004.11044319","article-title":"Assimilation and diffusion of web technologies in supply-chain management: An examination of key drivers and performance impacts.","volume":"9","author":"C.Ranganathan","year":"2004","journal-title":"International Journal of Electronic Commerce"},{"key":"ijsse.2014070103-34","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365-2575.2011.00397.x"},{"key":"ijsse.2014070103-35","unstructured":"Scott, W. R. (1994). Institutions and organizations: toward a theoretical synthesis. Institutional environments and organizations: Structural complexity and individualism, 55-80."},{"key":"ijsse.2014070103-36","doi-asserted-by":"publisher","DOI":"10.1037\/1082-989X.7.4.422"},{"key":"ijsse.2014070103-37","doi-asserted-by":"crossref","unstructured":"Sumner, M. (1999). Critical success factors in enterprise wide information management systems projects. Paper presented at the Proceedings of the 1999 ACM SIGCPR conference on Computer personnel research.","DOI":"10.1145\/299513.299722"},{"key":"ijsse.2014070103-38","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsis.2006.07.002"},{"key":"ijsse.2014070103-39","doi-asserted-by":"crossref","first-page":"19","DOI":"10.2307\/30036518","article-title":"Predicting intention to adopt interorganizational linkages: An institutional perspective.","author":"H.-H.Teo","year":"2003","journal-title":"Management Information Systems Quarterly"},{"key":"ijsse.2014070103-40","article-title":"Mimetic isomorphism and technology evaluation: Does imitation transcend judgment?","author":"P.Tingling","year":"2002","journal-title":"Journal of the Association for Information Systems"},{"key":"ijsse.2014070103-41","unstructured":"Wang, P. (2008). Assimilating IT Innovation: The Longitudinal Effects of Institutionalization and Resource Dependence. Paper presented at the ICIS."},{"key":"ijsse.2014070103-42","doi-asserted-by":"publisher","DOI":"10.1016\/S0149-2063(03)00084-9"},{"key":"ijsse.2014070103-43","doi-asserted-by":"publisher","DOI":"10.1287\/mnsc.1050.0487"},{"key":"ijsse.2014070103-44","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2009.09.007"},{"key":"ijsse.2014070103-45","doi-asserted-by":"publisher","DOI":"10.2307\/2094862"},{"key":"ijsse.2014070103-46","doi-asserted-by":"publisher","DOI":"10.1146\/annurev.so.13.080187.002303"}],"container-title":["International Journal of Secure Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=118147","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,16]],"date-time":"2019-08-16T23:09:48Z","timestamp":1565996988000},"score":1,"resource":{"primary":{"URL":"http:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/ijsse.2014070103"}},"subtitle":["Effects of External Pressures and Roles of Internal Factors"],"short-title":[],"issued":{"date-parts":[[2014,7]]},"references-count":47,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.4018\/ijsse.2014070103","relation":{},"ISSN":["1947-3036","1947-3044"],"issn-type":[{"value":"1947-3036","type":"print"},{"value":"1947-3044","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,7]]}}}