{"id":"https://openalex.org/W2609990009","doi":"https://doi.org/10.1108/ics-03-2017-0013","title":"Organisational culture, procedural countermeasures, and employee security behaviour","display_name":"Organisational culture, procedural countermeasures, and employee security behaviour","publication_year":2017,"publication_date":"2017-04-27","ids":{"openalex":"https://openalex.org/W2609990009","doi":"https://doi.org/10.1108/ics-03-2017-0013","mag":"2609990009"},"language":"en","primary_location":{"id":"doi:10.1108/ics-03-2017-0013","is_oa":false,"landing_page_url":"https://doi.org/10.1108/ics-03-2017-0013","pdf_url":null,"source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/10379/17285","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036801930","display_name":"Lena Connolly","orcid":"https://orcid.org/0000-0002-7110-9594"},"institutions":[{"id":"https://openalex.org/I130828816","display_name":"University of Leeds","ror":"https://ror.org/024mrxd33","country_code":"GB","type":"education","lineage":["https://openalex.org/I130828816"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Lena Yuryna Connolly","raw_affiliation_strings":["School of Law, University of Leeds, Leeds, UK"],"affiliations":[{"raw_affiliation_string":"School of Law, University of Leeds, Leeds, UK","institution_ids":["https://openalex.org/I130828816"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011470237","display_name":"Michael Lang","orcid":"https://orcid.org/0000-0001-7961-2285"},"institutions":[{"id":"https://openalex.org/I188760350","display_name":"Ollscoil na Gaillimhe \u2013 University of Galway","ror":"https://ror.org/03bea9k73","country_code":"IE","type":"education","lineage":["https://openalex.org/I188760350"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Michael Lang","raw_affiliation_strings":["Business Information Systems, National University of Ireland Galway, Galway, Ireland"],"affiliations":[{"raw_affiliation_string":"Business Information Systems, National University of Ireland Galway, Galway, Ireland","institution_ids":["https://openalex.org/I188760350"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002305842","display_name":"John N. Gathegi","orcid":null},"institutions":[{"id":"https://openalex.org/I2613432","display_name":"University of South Florida","ror":"https://ror.org/032db5x82","country_code":"US","type":"education","lineage":["https://openalex.org/I2613432"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John Gathegi","raw_affiliation_strings":["School of Information, University of South Florida, Tampa, USA"],"affiliations":[{"raw_affiliation_string":"School of Information, University of South Florida, Tampa, USA","institution_ids":["https://openalex.org/I2613432"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067640470","display_name":"Doug Tygar","orcid":null},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Doug J. Tygar","raw_affiliation_strings":["Electrical Engineering and Computer Science, University of California Berkeley Research, Berkeley, California, USA"],"affiliations":[{"raw_affiliation_string":"Electrical Engineering and Computer Science, University of California Berkeley Research, Berkeley, California, USA","institution_ids":["https://openalex.org/I95457486"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5036801930"],"corresponding_institution_ids":["https://openalex.org/I130828816"],"apc_list":null,"apc_paid":null,"fwci":9.5962,"has_fulltext":false,"cited_by_count":53,"citation_normalized_percentile":{"value":0.97945289,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"25","issue":"2","first_page":"118","last_page":"136"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.64276123046875},{"id":"https://openalex.org/keywords/information-security-management","display_name":"Information security management","score":0.6247222423553467},{"id":"https://openalex.org/keywords/critical-security-studies","display_name":"Critical security studies","score":0.5308467149734497},{"id":"https://openalex.org/keywords/originality","display_name":"Originality","score":0.4980127811431885},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4864199161529541},{"id":"https://openalex.org/keywords/security-management","display_name":"Security management","score":0.4830211102962494},{"id":"https://openalex.org/keywords/public-relations","display_name":"Public relations","score":0.44387561082839966},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.4357577860355377},{"id":"https://openalex.org/keywords/grounded-theory","display_name":"Grounded theory","score":0.41548240184783936},{"id":"https://openalex.org/keywords/security-awareness","display_name":"Security awareness","score":0.41067367792129517},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.3099730610847473},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.29254698753356934},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.2805930972099304},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.2708190679550171},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.24841594696044922},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.239644855260849},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.191096693277359},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.10798564553260803},{"id":"https://openalex.org/keywords/qualitative-research","display_name":"Qualitative research","score":0.10494604706764221},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.09235283732414246}],"concepts":[{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.64276123046875},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.6247222423553467},{"id":"https://openalex.org/C505623098","wikidata":"https://www.wikidata.org/wiki/Q3002932","display_name":"Critical security studies","level":5,"score":0.5308467149734497},{"id":"https://openalex.org/C2776950860","wikidata":"https://www.wikidata.org/wiki/Q2914681","display_name":"Originality","level":3,"score":0.4980127811431885},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4864199161529541},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.4830211102962494},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.44387561082839966},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.4357577860355377},{"id":"https://openalex.org/C156325361","wikidata":"https://www.wikidata.org/wiki/Q1152864","display_name":"Grounded theory","level":3,"score":0.41548240184783936},{"id":"https://openalex.org/C2778652015","wikidata":"https://www.wikidata.org/wiki/Q7445019","display_name":"Security awareness","level":3,"score":0.41067367792129517},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.3099730610847473},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29254698753356934},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.2805930972099304},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.2708190679550171},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.24841594696044922},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.239644855260849},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.191096693277359},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.10798564553260803},{"id":"https://openalex.org/C190248442","wikidata":"https://www.wikidata.org/wiki/Q839486","display_name":"Qualitative research","level":2,"score":0.10494604706764221},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.09235283732414246},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1108/ics-03-2017-0013","is_oa":false,"landing_page_url":"https://doi.org/10.1108/ics-03-2017-0013","pdf_url":null,"source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"},{"id":"pmh:oai:aran.library.nuigalway.ie/:10379/17285","is_oa":true,"landing_page_url":"http://hdl.handle.net/10379/17285","pdf_url":null,"source":{"id":"https://openalex.org/S4377196322","display_name":"ARAN (University of Galway Research Repository) (Ollscoil na Gaillimhe \u2013 University of Galway)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I188760350","host_organization_name":"Ollscoil na Gaillimhe \u2013 University of Galway","host_organization_lineage":["https://openalex.org/I188760350"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Article"},{"id":"pmh:oai:digitalcommons.usf.edu:si_facpub-1612","is_oa":false,"landing_page_url":"https://digitalcommons.usf.edu/si_facpub/620","pdf_url":null,"source":{"id":"https://openalex.org/S4377196272","display_name":"Digital Commons - University of South Florida (University of South Florida)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2613432","host_organization_name":"University of South Florida","host_organization_lineage":["https://openalex.org/I2613432"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"School of Information Faculty Publications","raw_type":"article"},{"id":"pmh:oai:scholarcommons.usf.edu:si_facpub-1612","is_oa":false,"landing_page_url":"https://scholarcommons.usf.edu/si_facpub/620","pdf_url":null,"source":{"id":"https://openalex.org/S4377196272","display_name":"Digital Commons - University of South Florida (University of South Florida)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2613432","host_organization_name":"University of South Florida","host_organization_lineage":["https://openalex.org/I2613432"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"School of Information Faculty Publications","raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:aran.library.nuigalway.ie/:10379/17285","is_oa":true,"landing_page_url":"http://hdl.handle.net/10379/17285","pdf_url":null,"source":{"id":"https://openalex.org/S4377196322","display_name":"ARAN (University of Galway Research Repository) (Ollscoil na Gaillimhe \u2013 University of Galway)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I188760350","host_organization_name":"Ollscoil na Gaillimhe \u2013 University of Galway","host_organization_lineage":["https://openalex.org/I188760350"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.800000011920929}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W82889029","https://openalex.org/W242499599","https://openalex.org/W285306438","https://openalex.org/W560351392","https://openalex.org/W1515587369","https://openalex.org/W1543864429","https://openalex.org/W1602619638","https://openalex.org/W1903013269","https://openalex.org/W1960883049","https://openalex.org/W1964009157","https://openalex.org/W1967597150","https://openalex.org/W1970750360","https://openalex.org/W1985044911","https://openalex.org/W1987719539","https://openalex.org/W1992549547","https://openalex.org/W1994214898","https://openalex.org/W1994285348","https://openalex.org/W2000645163","https://openalex.org/W2001266000","https://openalex.org/W2002813779","https://openalex.org/W2006762475","https://openalex.org/W2010582304","https://openalex.org/W2012865253","https://openalex.org/W2017609493","https://openalex.org/W2024419606","https://openalex.org/W2025043113","https://openalex.org/W2058144115","https://openalex.org/W2067594810","https://openalex.org/W2069656318","https://openalex.org/W2070775597","https://openalex.org/W2072047708","https://openalex.org/W2072132034","https://openalex.org/W2078076646","https://openalex.org/W2081526168","https://openalex.org/W2082028818","https://openalex.org/W2083213605","https://openalex.org/W2091106293","https://openalex.org/W2097694607","https://openalex.org/W2100797043","https://openalex.org/W2105609518","https://openalex.org/W2105992541","https://openalex.org/W2119587968","https://openalex.org/W2133295470","https://openalex.org/W2140918013","https://openalex.org/W2141951329","https://openalex.org/W2142318891","https://openalex.org/W2155595349","https://openalex.org/W2163743418","https://openalex.org/W2169853522","https://openalex.org/W2169920464","https://openalex.org/W2170899042","https://openalex.org/W2287668997","https://openalex.org/W2782607685","https://openalex.org/W3121638138","https://openalex.org/W7038449975"],"related_works":["https://openalex.org/W4256374004","https://openalex.org/W4310892428","https://openalex.org/W2120971814","https://openalex.org/W2384723023","https://openalex.org/W2777401565","https://openalex.org/W2144394323","https://openalex.org/W2362334938","https://openalex.org/W1529017291","https://openalex.org/W3048948897","https://openalex.org/W330653092"],"abstract_inverted_index":{"Purpose":[0],"This":[1,88,119,139,168,191],"paper":[2,89,120,140,169],"provides":[3],"new":[4],"insights":[5],"about":[6],"security":[7,22,28,35,64,75,79,124,132,146,176,179,204],"behaviour":[8,133,187],"in":[9,37,62,134,144,184,197,206],"selected":[10],"US":[11],"and":[12,20,48,66,95,126,148,181,210,215],"Irish":[13],"organisations":[14,38],"by":[15,201,211],"investigating":[16,212],"how":[17],"organisational":[18,97,127,135,182],"culture":[19,98,128,183],"procedural":[21,123,175],"countermeasures":[23,125],"tend":[24,129],"to":[25,43,82,130,163],"influence":[26],"employee":[27],"actions.":[29],"An":[30],"increasing":[31],"number":[32],"of":[33,46,70,74,174,188],"information":[34,145,178,203],"breaches":[36],"presents":[39],"a":[40,71,114,198],"serious":[41],"threat":[42],"the":[44,59,63,67,77,108,142,153,171,207],"confidentiality":[45],"personal":[47],"commercially":[49],"sensitive":[50],"data.":[51],"While":[52],"recent":[53],"research":[54,147,208],"shows":[55],"that":[56,122,157],"humans":[57],"are":[58],"weakest":[60],"link":[61],"chain":[65],"root":[68],"cause":[69],"great":[72],"portion":[73],"breaches,":[76],"extant":[78],"literature":[80],"tends":[81],"focus":[83,158],"on":[84,91,107,159],"technical":[85,164],"issues.":[86,165],"Design/methodology/approach":[87],"builds":[90],"general":[92,194],"deterrence":[93,195],"theory":[94,111,196],"prior":[96],"literature.":[99],"The":[100],"methodology":[101],"adapted":[102],"for":[103],"this":[104],"study":[105,192],"draws":[106],"analytical":[109],"grounded":[110],"approach":[112],"employing":[113],"constant":[115],"comparative":[116],"method.":[117],"Findings":[118],"demonstrates":[121],"affect":[131],"settings.":[136],"Research":[137],"limitations/implications":[138],"fills":[141],"void":[143],"takes":[149],"its":[150],"place":[151],"among":[152],"very":[154],"few":[155],"studies":[156],"behavioural":[160],"as":[161],"opposed":[162],"Practical":[166],"implications":[167],"highlights":[170],"important":[172],"role":[173],"countermeasures,":[177],"awareness":[180,205],"managing":[185],"illicit":[186],"employees.":[189],"Originality/value":[190],"extends":[193],"novel":[199],"way":[200],"including":[202],"model":[209],"both":[213],"negative":[214],"positive":[216],"behaviours.":[217]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":12},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":4}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2025-10-10T00:00:00"}