A review and analysis of deterrence theory in the IS security literature: making sense of the disparate findings

D’Arcy, John; Herath, Tejaswini

doi:10.1057/ejis.2011.23

Cited by 276 publications

(206 citation statements)

References 56 publications

Supporting

Mentioning

195

Contrasting

Order By: Relevance

“…When it comes to human behavior, possible illicit activities can be controlled when severe punishment are in place [29]. Again, when it comes to internal defense, internal employees are still viewed as the weakest link regarding exploits and system mismanagement [27].…”

Section: Deterrence Theory (Dt)mentioning

confidence: 99%

“…Most of computers incidents are related to internal actions from authorized users [57]. Despite incorporation effective and necessary security measures, organizations are hit with exploits due to inappropriate actions [29]. The deviant behavior of insider threats whether malicious or accidental are still prevalent and DT can be an additional layer to make aware that provisioned actions are in place against such occurrence [77].…”

Section: Deterrence Theory (Dt)mentioning

confidence: 99%

See 1 more Smart Citation

Discovering New Cyber Protection Approaches from a Security Professional Prospective

Loukaka¹,

Rahman²

2017

IJCNC

View full text Add to dashboard Cite

Cybersecurity has become a very hot topic due to high profile breaches that occurred in the past years. Despite the implementation of current known pre-emptive methods such as intrusion detection systems, anti-viruses, and the use of firewalls, hackers still find sophisticated means to steal data or impair an organization by targeting their assets. It is important that security professionals need to "think outside the box" and use new tools and techniques to mitigate threats beyond current known detections and prevention technologies. It is imperative that our infrastructure and assets are impermeable from domestic and foreign attackers. Our best line of defense is the detection of any threats or vulnerability to prevent or minimize damages of our assets from domestic and foreign attackers.

show abstract

Section: Deterrence Theory (Dt)mentioning

confidence: 99%

Section: Deterrence Theory (Dt)mentioning

confidence: 99%

Discovering New Cyber Protection Approaches from a Security Professional Prospective

Loukaka¹,

Rahman²

2017

IJCNC

View full text Add to dashboard Cite

show abstract

“…Previous studies in the field of behavioral information security have tested different theories to explain why organizational members engage in risky behaviors. However, although testing the same theory (e.g., deterrence theory, theory of planned behavior) the findings have been inconsistent (D"Arcy and Herath, 2011;Sommestad et al, 2013). One proposed explanation for these disparate findings is that the theoretical models have not been tested for their validity across different cultural settings (Karjalainen et al, 2013;Sommestad et al, 2013).…”

Section: Rq1: Which Behavioral Information Security Governance Factormentioning

confidence: 99%

Information security knowledge sharing in organizations: Investigating the effect of behavioral information security governance and national culture

Flores

Antonsen

Ekstedt

2014

Computers & Security

120

View full text Add to dashboard Cite

Information security knowledge sharing in organizations: Investigating the effect of behavioral information security governance and national culture.Computers & Security, http://dx.doi.org/10.1016/j.cose. 2014.03.004 Access to the published version may require subscription. N.B. When citing this work, cite the original published paper. Permanent link to this version:http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva- 142630 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 AbstractThis paper presents an empirical investigation on what behavioral information security governance factors drives the establishment of information security knowledge sharing in organizations. Data was collected from organizations located in different geographic regions of the world, and the amount of data collected from two countries -namely, USA and Sweden -allowed us to investigate if the effect of behavioral information security governance factors on the establishment of security knowledge sharing differs based on national culture.The study followed a mixed methods research design, wherein qualitative data was collected to both establish the study"s research model and develop a survey instrument that was distributed to 578 information security executives. The results suggest that processes to coordinate implemented security knowledge sharing mechanisms have a major direct influence on the establishment of security knowledge sharing in organizations; the effect of organizational structure (e.g., centralized security function to develop and deploy uniform firm-wide policies, and use of steering committees to facilitate information security planning) is slightly weaker, while business-based information security management has no significant direct effect on security knowledge sharing. A mediation analysis revealed that the reason for the non-significant direct relation between business-based information security management and security knowledge sharing is the fully mediating effect of coordinating information security processes. Thus, the results disentangles the interrelated influences of behavioral information security governance factors on security knowledge sharing by showing that information security governance sets the platform to establish security knowledge sharing, and coordinating processes realize the effect of both the structure of the information security function and the alignment of information security management with business needs.A multigroup analysis identified that national culture had a significant moderating effect on the association between four of the six proposed relations. In Sweden -which is seen as a less individualist, feminine country -managers tend to focus their efforts on implementing controls that are aligned with business activities and employees" need; monitoring the effectiveness of the implemented con...

show abstract

“…The IS security literature has found that perceived certainty and severity of sanctions negatively influence IT deviant behaviors [22,24,39]. For example, Straub [71] points out that security countermeasure investment is negatively associated with computer abuse.…”

Section: Figure 1 An Integrated Emotion and Gdt Modelmentioning

confidence: 99%

Anger or Fear? Effects of Discrete Emotions on Deviant Security Behavior

Luo

Hsu

2017

Proceedings of the 50th Hawaii International Conference on System Sciences (2017)

View full text Add to dashboard Cite

show abstract

A review and analysis of deterrence theory in the IS security literature: making sense of the disparate findings

Cited by 276 publications

References 56 publications

Discovering New Cyber Protection Approaches from a Security Professional Prospective

Discovering New Cyber Protection Approaches from a Security Professional Prospective

Information security knowledge sharing in organizations: Investigating the effect of behavioral information security governance and national culture

Anger or Fear? Effects of Discrete Emotions on Deviant Security Behavior

Contact Info

Product

Resources

About