{"id":"https://openalex.org/W2969413802","doi":"https://doi.org/10.1080/0144929x.2019.1653992","title":"Deterrent effects of punishment and training on insider security threats: a field experiment on phishing attacks","display_name":"Deterrent effects of punishment and training on insider security threats: a field experiment on phishing attacks","publication_year":2019,"publication_date":"2019-08-19","ids":{"openalex":"https://openalex.org/W2969413802","doi":"https://doi.org/10.1080/0144929x.2019.1653992","mag":"2969413802"},"language":"en","primary_location":{"id":"doi:10.1080/0144929x.2019.1653992","is_oa":false,"landing_page_url":"https://doi.org/10.1080/0144929x.2019.1653992","pdf_url":null,"source":{"id":"https://openalex.org/S123849098","display_name":"Behaviour and Information Technology","issn_l":"0144-929X","issn":["0144-929X","1362-3001"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Behaviour & Information Technology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100735681","display_name":"Bora Kim","orcid":"https://orcid.org/0000-0002-8859-9235"},"institutions":[{"id":"https://openalex.org/I193775966","display_name":"Yonsei University","ror":"https://ror.org/01wjejq96","country_code":"KR","type":"education","lineage":["https://openalex.org/I193775966"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Bora Kim","raw_affiliation_strings":["Barun ICT Research Center, Yonsei University, Seoul, Korea","Graduate School of Information, Yonsei University, Seoul, Korea"],"raw_orcid":"https://orcid.org/0000-0002-8859-9235","affiliations":[{"raw_affiliation_string":"Barun ICT Research Center, Yonsei University, Seoul, Korea","institution_ids":["https://openalex.org/I193775966"]},{"raw_affiliation_string":"Graduate School of Information, Yonsei University, Seoul, Korea","institution_ids":["https://openalex.org/I193775966"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100735681","display_name":"Bora Kim","orcid":"https://orcid.org/0000-0002-8859-9235"},"institutions":[{"id":"https://openalex.org/I193775966","display_name":"Yonsei University","ror":"https://ror.org/01wjejq96","country_code":"KR","type":"education","lineage":["https://openalex.org/I193775966"]},{"id":"https://openalex.org/I196733613","display_name":"Korea Gas Corporation (South Korea)","ror":"https://ror.org/0058p8h34","country_code":"KR","type":"company","lineage":["https://openalex.org/I196733613"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Bora Kim","raw_affiliation_strings":["Barun ICT Research Center, Yonsei University, Seoul, Korea","Graduate School of Information, Yonsei University, Seoul, Korea","Korea Gas Corporation, Daegu, Korea"],"raw_orcid":"https://orcid.org/0000-0002-8859-9235","affiliations":[{"raw_affiliation_string":"Barun ICT Research Center, Yonsei University, Seoul, Korea","institution_ids":["https://openalex.org/I193775966"]},{"raw_affiliation_string":"Graduate School of Information, Yonsei University, Seoul, Korea","institution_ids":["https://openalex.org/I193775966"]},{"raw_affiliation_string":"Korea Gas Corporation, Daegu, Korea","institution_ids":["https://openalex.org/I196733613"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011916828","display_name":"Do-Yeon Lee","orcid":null},"institutions":[{"id":"https://openalex.org/I193775966","display_name":"Yonsei University","ror":"https://ror.org/01wjejq96","country_code":"KR","type":"education","lineage":["https://openalex.org/I193775966"]},{"id":"https://openalex.org/I196733613","display_name":"Korea Gas Corporation (South Korea)","ror":"https://ror.org/0058p8h34","country_code":"KR","type":"company","lineage":["https://openalex.org/I196733613"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Do-Yeon Lee","raw_affiliation_strings":["Korea Gas Corporation, Daegu, Korea","Graduate School of Information, Yonsei University, Seoul, Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea Gas Corporation, Daegu, Korea","institution_ids":["https://openalex.org/I196733613"]},{"raw_affiliation_string":"Graduate School of Information, Yonsei University, Seoul, Korea","institution_ids":["https://openalex.org/I193775966"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101708985","display_name":"Beomsoo Kim","orcid":"https://orcid.org/0000-0003-4821-8271"},"institutions":[{"id":"https://openalex.org/I193775966","display_name":"Yonsei University","ror":"https://ror.org/01wjejq96","country_code":"KR","type":"education","lineage":["https://openalex.org/I193775966"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Beomsoo Kim","raw_affiliation_strings":["Barun ICT Research Center, Yonsei University, Seoul, Korea","Graduate School of Information, Yonsei University, Seoul, Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Barun ICT Research Center, Yonsei University, Seoul, Korea","institution_ids":["https://openalex.org/I193775966"]},{"raw_affiliation_string":"Graduate School of Information, Yonsei University, Seoul, Korea","institution_ids":["https://openalex.org/I193775966"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101708985","display_name":"Beomsoo Kim","orcid":"https://orcid.org/0000-0003-4821-8271"},"institutions":[{"id":"https://openalex.org/I193775966","display_name":"Yonsei University","ror":"https://ror.org/01wjejq96","country_code":"KR","type":"education","lineage":["https://openalex.org/I193775966"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Beomsoo Kim","raw_affiliation_strings":["Barun ICT Research Center, Yonsei University, Seoul, Korea","Graduate School of Information, Yonsei University, Seoul, Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Barun ICT Research Center, Yonsei University, Seoul, Korea","institution_ids":["https://openalex.org/I193775966"]},{"raw_affiliation_string":"Graduate School of Information, Yonsei University, Seoul, Korea","institution_ids":["https://openalex.org/I193775966"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5100735681","https://openalex.org/A5101708985"],"corresponding_institution_ids":["https://openalex.org/I193775966","https://openalex.org/I196733613"],"apc_list":null,"apc_paid":null,"fwci":5.2895,"has_fulltext":false,"cited_by_count":35,"citation_normalized_percentile":{"value":0.9590124,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"39","issue":"11","first_page":"1156","last_page":"1175"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.8880022764205933},{"id":"https://openalex.org/keywords/punishment","display_name":"Punishment (psychology)","score":0.7028500437736511},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6964583396911621},{"id":"https://openalex.org/keywords/deterrence-theory","display_name":"Deterrence theory","score":0.6800657510757446},{"id":"https://openalex.org/keywords/position","display_name":"Position (finance)","score":0.5416498780250549},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.523898720741272},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47744613885879517},{"id":"https://openalex.org/keywords/deterrence","display_name":"Deterrence (psychology)","score":0.4523431360721588},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.41295480728149414},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.39055734872817993},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.38014620542526245},{"id":"https://openalex.org/keywords/public-relations","display_name":"Public relations","score":0.33218133449554443},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.3062007427215576},{"id":"https://openalex.org/keywords/criminology","display_name":"Criminology","score":0.23618438839912415},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.2286767065525055},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.1660265326499939},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.1416497528553009},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.12637919187545776},{"id":"https://openalex.org/keywords/finance","display_name":"Finance","score":0.10814830660820007},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.09154552221298218}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.8880022764205933},{"id":"https://openalex.org/C2779295839","wikidata":"https://www.wikidata.org/wiki/Q3544090","display_name":"Punishment (psychology)","level":2,"score":0.7028500437736511},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6964583396911621},{"id":"https://openalex.org/C60643870","wikidata":"https://www.wikidata.org/wiki/Q1949683","display_name":"Deterrence theory","level":2,"score":0.6800657510757446},{"id":"https://openalex.org/C198082294","wikidata":"https://www.wikidata.org/wiki/Q3399648","display_name":"Position (finance)","level":2,"score":0.5416498780250549},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.523898720741272},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47744613885879517},{"id":"https://openalex.org/C2780982575","wikidata":"https://www.wikidata.org/wiki/Q332142","display_name":"Deterrence (psychology)","level":2,"score":0.4523431360721588},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.41295480728149414},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.39055734872817993},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.38014620542526245},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.33218133449554443},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.3062007427215576},{"id":"https://openalex.org/C73484699","wikidata":"https://www.wikidata.org/wiki/Q161733","display_name":"Criminology","level":1,"score":0.23618438839912415},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.2286767065525055},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.1660265326499939},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.1416497528553009},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.12637919187545776},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.10814830660820007},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.09154552221298218},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1080/0144929x.2019.1653992","is_oa":false,"landing_page_url":"https://doi.org/10.1080/0144929x.2019.1653992","pdf_url":null,"source":{"id":"https://openalex.org/S123849098","display_name":"Behaviour and Information Technology","issn_l":"0144-929X","issn":["0144-929X","1362-3001"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Behaviour & Information Technology","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:taf:tbitxx:v:39:y:2020:i:11:p:1156-1175","is_oa":false,"landing_page_url":"http://hdl.handle.net/10.1080/0144929X.2019.1653992","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":96,"referenced_works":["https://openalex.org/W1500900393","https://openalex.org/W1502678715","https://openalex.org/W1546488438","https://openalex.org/W1550621568","https://openalex.org/W1602619638","https://openalex.org/W1901676853","https://openalex.org/W1972309494","https://openalex.org/W1974075050","https://openalex.org/W1979028850","https://openalex.org/W1983208818","https://openalex.org/W1986801655","https://openalex.org/W1987381312","https://openalex.org/W1989210507","https://openalex.org/W1993957541","https://openalex.org/W1994214898","https://openalex.org/W2004147962","https://openalex.org/W2006376235","https://openalex.org/W2007227619","https://openalex.org/W2010460906","https://openalex.org/W2011545332","https://openalex.org/W2012645943","https://openalex.org/W2017609493","https://openalex.org/W2018125809","https://openalex.org/W2019176237","https://openalex.org/W2022786786","https://openalex.org/W2024424197","https://openalex.org/W2026689473","https://openalex.org/W2029518478","https://openalex.org/W2029591949","https://openalex.org/W2030538258","https://openalex.org/W2030762751","https://openalex.org/W2031645755","https://openalex.org/W2051709477","https://openalex.org/W2056847254","https://openalex.org/W2056865816","https://openalex.org/W2060771466","https://openalex.org/W2065308368","https://openalex.org/W2068729452","https://openalex.org/W2070257463","https://openalex.org/W2070958191","https://openalex.org/W2071612949","https://openalex.org/W2071869991","https://openalex.org/W2076229343","https://openalex.org/W2076845877","https://openalex.org/W2081228936","https://openalex.org/W2084912429","https://openalex.org/W2085463891","https://openalex.org/W2085901425","https://openalex.org/W2105992541","https://openalex.org/W2106096361","https://openalex.org/W2109262595","https://openalex.org/W2112790070","https://openalex.org/W2119587968","https://openalex.org/W2122107885","https://openalex.org/W2126949206","https://openalex.org/W2127064776","https://openalex.org/W2127084308","https://openalex.org/W2128070591","https://openalex.org/W2136136174","https://openalex.org/W2139204976","https://openalex.org/W2142287040","https://openalex.org/W2147445292","https://openalex.org/W2151570219","https://openalex.org/W2156438052","https://openalex.org/W2160353917","https://openalex.org/W2165041900","https://openalex.org/W2170899042","https://openalex.org/W2189821821","https://openalex.org/W2221203134","https://openalex.org/W2276368824","https://openalex.org/W2463209919","https://openalex.org/W2521695965","https://openalex.org/W2567769395","https://openalex.org/W2587234217","https://openalex.org/W2618014102","https://openalex.org/W2738072326","https://openalex.org/W2745971308","https://openalex.org/W2747294120","https://openalex.org/W2752847155","https://openalex.org/W2762332720","https://openalex.org/W2763315336","https://openalex.org/W2765523198","https://openalex.org/W2786705330","https://openalex.org/W2803982931","https://openalex.org/W2900098032","https://openalex.org/W2912285376","https://openalex.org/W3123405666","https://openalex.org/W4207014596","https://openalex.org/W4210947630","https://openalex.org/W4240677863","https://openalex.org/W4241800317","https://openalex.org/W4255290799","https://openalex.org/W4291214035","https://openalex.org/W4300096709","https://openalex.org/W4388638572","https://openalex.org/W6684212199"],"related_works":["https://openalex.org/W2149202530","https://openalex.org/W2807822918","https://openalex.org/W2180223090","https://openalex.org/W2900459213","https://openalex.org/W4220926647","https://openalex.org/W3121450494","https://openalex.org/W2154920720","https://openalex.org/W1998935086","https://openalex.org/W2260694300","https://openalex.org/W1526963055"],"abstract_inverted_index":{"There":[0],"is":[1],"no":[2],"doubt":[3],"that":[4,112,124],"organisational":[5,101,143,184],"security":[6,26,30],"threats":[7,20],"are":[8,36],"currently":[9],"surging,":[10],"internally":[11],"and":[12,33,52,99,123,173,181],"externally.":[13],"In":[14,138],"an":[15],"effort":[16],"to":[17,38,66],"prevent":[18],"internal":[19],"\u2013":[21,29],"employee":[22],"violations":[23],"of":[24,55,72,91,97,154,168],"information":[25,176,185],"policy":[27],"(ISP)":[28],"training":[31,158],"programmes":[32],"sanction":[34],"policies":[35,182],"implemented":[37],"a":[39,63,84],"large":[40],"extent":[41],"in":[42],"organisations.":[43,59],"However,":[44],"few":[45],"studies":[46],"have":[47],"verified":[48],"their":[49,106],"practical":[50],"effectiveness":[51],"the":[53,68,87,93,116,125,135,140,145,148,155],"impact":[54],"individual":[56],"characteristics":[57],"within":[58],"This":[60],"study":[61,170],"conducted":[62],"field":[64],"experiment":[65],"examine":[67],"actual":[69],"deterrent":[70,89,95],"effect":[71,90,96,163],"those":[73],"measures":[74,180],"against":[75],"phishing":[76,81,121,130],"attacks.":[77],"By":[78],"fabricating":[79],"fake":[80],"schemes":[82],"through":[83],"simulation":[85],"programme,":[86],"specific":[88],"punishment,":[92],"general":[94],"education,":[98],"employees\u2019":[100],"position":[102,162],"were":[103],"tested":[104],"on":[105],"ISP":[107],"compliance":[108],"behaviour.":[109],"Findings":[110],"confirmed":[111],"punishment":[113],"effectively":[114],"prevented":[115],"punished":[117],"from":[118],"falling":[119],"for":[120,129,151,183],"again":[122],"trained":[126],"group":[127],"fell":[128,150],"much":[131],"less":[132],"often":[133],"than":[134],"untrained":[136],"group.":[137],"addition,":[139],"higher":[141],"one\u2019s":[142],"position,":[144],"more":[146],"likely":[147],"person":[149],"phishing.":[152],"Regardless":[153],"treatment":[156],"(i.e.":[157],"or":[159],"punishment),":[160],"this":[161,169],"stood":[164],"out.":[165],"The":[166],"results":[167],"offer":[171],"researchers":[172],"practitioners":[174],"insightful":[175],"about":[177],"effective":[178],"deterrence":[179],"security.":[186]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":4}],"updated_date":"2026-06-22T08:00:12.763002","created_date":"2025-10-10T00:00:00"}