{"id":"https://openalex.org/W1607912078","doi":"https://doi.org/10.1108/imcs-08-2012-0045","title":"Variables influencing information security policy compliance","display_name":"Variables influencing information security policy compliance","publication_year":2014,"publication_date":"2014-01-25","ids":{"openalex":"https://openalex.org/W1607912078","doi":"https://doi.org/10.1108/imcs-08-2012-0045","mag":"1607912078"},"language":"en","primary_location":{"id":"doi:10.1108/imcs-08-2012-0045","is_oa":false,"landing_page_url":"https://doi.org/10.1108/imcs-08-2012-0045","pdf_url":null,"source":{"id":"https://openalex.org/S204075876","display_name":"Information Management & Computer Security","issn_l":"0968-5227","issn":["0968-5227","1758-5805"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Management & Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091355367","display_name":"Teodor Sommestad","orcid":"https://orcid.org/0000-0002-2606-4139"},"institutions":[{"id":"https://openalex.org/I1291458624","display_name":"Swedish Defence Research Agency","ror":"https://ror.org/0470cgs30","country_code":"SE","type":"funder","lineage":["https://openalex.org/I1291458624"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Teodor Sommestad","raw_affiliation_strings":["Swedish Defence Research Agency (FOI), Link\u00f6ping, Sweden","Swedish Defence Research Agency (FOI) Link\u00f6ping Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Swedish Defence Research Agency (FOI), Link\u00f6ping, Sweden","institution_ids":["https://openalex.org/I1291458624"]},{"raw_affiliation_string":"Swedish Defence Research Agency (FOI) Link\u00f6ping Sweden","institution_ids":["https://openalex.org/I1291458624"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079919068","display_name":"Jonas Hallberg","orcid":null},"institutions":[{"id":"https://openalex.org/I1291458624","display_name":"Swedish Defence Research Agency","ror":"https://ror.org/0470cgs30","country_code":"SE","type":"funder","lineage":["https://openalex.org/I1291458624"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Jonas Hallberg","raw_affiliation_strings":["Swedish Defence Research Agency (FOI), Link\u00f6ping, Sweden","Swedish Defence Research Agency (FOI) Link\u00f6ping Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Swedish Defence Research Agency (FOI), Link\u00f6ping, Sweden","institution_ids":["https://openalex.org/I1291458624"]},{"raw_affiliation_string":"Swedish Defence Research Agency (FOI) Link\u00f6ping Sweden","institution_ids":["https://openalex.org/I1291458624"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065346361","display_name":"Kristoffer Lundholm","orcid":null},"institutions":[{"id":"https://openalex.org/I1291458624","display_name":"Swedish Defence Research Agency","ror":"https://ror.org/0470cgs30","country_code":"SE","type":"funder","lineage":["https://openalex.org/I1291458624"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Kristoffer Lundholm","raw_affiliation_strings":["Swedish Defence Research Agency (FOI), Link\u00f6ping, Sweden","Swedish Defence Research Agency (FOI) Link\u00f6ping Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Swedish Defence Research Agency (FOI), Link\u00f6ping, Sweden","institution_ids":["https://openalex.org/I1291458624"]},{"raw_affiliation_string":"Swedish Defence Research Agency (FOI) Link\u00f6ping Sweden","institution_ids":["https://openalex.org/I1291458624"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102888224","display_name":"Johan Bengtsson","orcid":"https://orcid.org/0000-0003-1568-6562"},"institutions":[{"id":"https://openalex.org/I1291458624","display_name":"Swedish Defence Research Agency","ror":"https://ror.org/0470cgs30","country_code":"SE","type":"funder","lineage":["https://openalex.org/I1291458624"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Johan Bengtsson","raw_affiliation_strings":["Swedish Defence Research Agency (FOI), Link\u00f6ping, Sweden","Swedish Defence Research Agency (FOI) Link\u00f6ping Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Swedish Defence Research Agency (FOI), Link\u00f6ping, Sweden","institution_ids":["https://openalex.org/I1291458624"]},{"raw_affiliation_string":"Swedish Defence Research Agency (FOI) Link\u00f6ping Sweden","institution_ids":["https://openalex.org/I1291458624"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1291458624"],"apc_list":null,"apc_paid":null,"fwci":33.1511,"has_fulltext":false,"cited_by_count":190,"citation_normalized_percentile":{"value":0.99620415,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"22","issue":"1","first_page":"42","last_page":"75"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9623000025749207,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.6031402349472046},{"id":"https://openalex.org/keywords/extant-taxon","display_name":"Extant taxon","score":0.5744360089302063},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.5514628291130066},{"id":"https://openalex.org/keywords/variables","display_name":"Variables","score":0.5423378348350525},{"id":"https://openalex.org/keywords/variable","display_name":"Variable (mathematics)","score":0.49220409989356995},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4740928113460541},{"id":"https://openalex.org/keywords/control-variable","display_name":"Control variable","score":0.4567699134349823},{"id":"https://openalex.org/keywords/originality","display_name":"Originality","score":0.4537312388420105},{"id":"https://openalex.org/keywords/variation","display_name":"Variation (astronomy)","score":0.4494360685348511},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.44779136776924133},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4228115975856781},{"id":"https://openalex.org/keywords/value","display_name":"Value (mathematics)","score":0.4180728793144226},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3215973377227783},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3069918751716614},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.22806450724601746},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.13818922638893127},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.12038296461105347},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.11465463042259216},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10614049434661865}],"concepts":[{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.6031402349472046},{"id":"https://openalex.org/C178300618","wikidata":"https://www.wikidata.org/wiki/Q1898509","display_name":"Extant taxon","level":2,"score":0.5744360089302063},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.5514628291130066},{"id":"https://openalex.org/C27574286","wikidata":"https://www.wikidata.org/wiki/Q320723","display_name":"Variables","level":2,"score":0.5423378348350525},{"id":"https://openalex.org/C182365436","wikidata":"https://www.wikidata.org/wiki/Q50701","display_name":"Variable (mathematics)","level":2,"score":0.49220409989356995},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4740928113460541},{"id":"https://openalex.org/C153240184","wikidata":"https://www.wikidata.org/wiki/Q3243772","display_name":"Control variable","level":2,"score":0.4567699134349823},{"id":"https://openalex.org/C2776950860","wikidata":"https://www.wikidata.org/wiki/Q2914681","display_name":"Originality","level":3,"score":0.4537312388420105},{"id":"https://openalex.org/C2778334786","wikidata":"https://www.wikidata.org/wiki/Q1586270","display_name":"Variation (astronomy)","level":2,"score":0.4494360685348511},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.44779136776924133},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4228115975856781},{"id":"https://openalex.org/C2776291640","wikidata":"https://www.wikidata.org/wiki/Q2912517","display_name":"Value (mathematics)","level":2,"score":0.4180728793144226},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3215973377227783},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3069918751716614},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.22806450724601746},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.13818922638893127},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.12038296461105347},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.11465463042259216},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10614049434661865},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C11012388","wikidata":"https://www.wikidata.org/wiki/Q170658","display_name":"Creativity","level":2,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C78458016","wikidata":"https://www.wikidata.org/wiki/Q840400","display_name":"Evolutionary biology","level":1,"score":0.0},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C44870925","wikidata":"https://www.wikidata.org/wiki/Q37547","display_name":"Astrophysics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1108/imcs-08-2012-0045","is_oa":false,"landing_page_url":"https://doi.org/10.1108/imcs-08-2012-0045","pdf_url":null,"source":{"id":"https://openalex.org/S204075876","display_name":"Information Management & Computer Security","issn_l":"0968-5227","issn":["0968-5227","1758-5805"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Management & Computer Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5099999904632568}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":53,"referenced_works":["https://openalex.org/W1237951544","https://openalex.org/W1491644571","https://openalex.org/W1536398137","https://openalex.org/W1538043169","https://openalex.org/W1557992034","https://openalex.org/W1577824228","https://openalex.org/W1578929691","https://openalex.org/W1602619638","https://openalex.org/W1964009157","https://openalex.org/W1966997002","https://openalex.org/W1970809283","https://openalex.org/W1993957541","https://openalex.org/W1994285348","https://openalex.org/W1997437719","https://openalex.org/W1997836764","https://openalex.org/W1999322433","https://openalex.org/W2000645163","https://openalex.org/W2005204114","https://openalex.org/W2007066193","https://openalex.org/W2007409322","https://openalex.org/W2010902645","https://openalex.org/W2013587720","https://openalex.org/W2018125809","https://openalex.org/W2021464460","https://openalex.org/W2022122406","https://openalex.org/W2024419606","https://openalex.org/W2033213440","https://openalex.org/W2042720915","https://openalex.org/W2042874149","https://openalex.org/W2076233683","https://openalex.org/W2081444452","https://openalex.org/W2088410632","https://openalex.org/W2096598237","https://openalex.org/W2097694607","https://openalex.org/W2099697766","https://openalex.org/W2100797043","https://openalex.org/W2105992541","https://openalex.org/W2118328848","https://openalex.org/W2119587968","https://openalex.org/W2122983118","https://openalex.org/W2133295470","https://openalex.org/W2142551657","https://openalex.org/W2156438052","https://openalex.org/W2168894761","https://openalex.org/W2170554716","https://openalex.org/W2291186705","https://openalex.org/W2506365054","https://openalex.org/W2944944168","https://openalex.org/W4255290799","https://openalex.org/W6631113584","https://openalex.org/W6635313423","https://openalex.org/W6670990802","https://openalex.org/W7036602195"],"related_works":["https://openalex.org/W4232099438","https://openalex.org/W2342184954","https://openalex.org/W3041181814","https://openalex.org/W4251953331","https://openalex.org/W2762684468","https://openalex.org/W3036947300","https://openalex.org/W1976005079","https://openalex.org/W2142515455","https://openalex.org/W2481421941","https://openalex.org/W2380583381"],"abstract_inverted_index":{"Purpose":[0],"\u2013":[1,29,69,140,184,228],"The":[2,51],"purpose":[3],"of":[4,18,33,107,115,148,165,208,235,246],"this":[5],"paper":[6],"is":[7,40,142,230],"to":[8,21,83,175,193],"identify":[9,22],"variables":[10,26,53,77,98,109,167,209,238],"that":[11,144,204,239],"influence":[12,211,218,240],"compliance":[13,86,196,241],"with":[14,197,242],"information":[15,199,243],"security":[16,84,200,244],"policies":[17,201,245],"organizations":[19],"and":[20,57,66,87,121,168,220,224],"how":[23,192],"important":[24],"these":[25,55],"are.":[27],"Design/methodology/approach":[28],"A":[30],"systematic":[31,233],"review":[32,43,234],"empirical":[34],"studies":[35,46,56,130,151],"described":[36],"in":[37,54,81,118,128,160,178],"extant":[38],"literature":[39],"performed.":[41],"This":[42,229],"found":[44,95],"29":[45,72],"meeting":[47],"its":[48],"inclusion":[49],"criterion.":[50],"investigated":[52,127],"the":[58,71,97,100,108,116,131,145,149,156,161,163,231],"effect":[59],"size":[60],"reported":[61],"for":[62],"them":[63],"were":[64],"extracted":[65],"analysed.":[67],"Findings":[68],"In":[70,214],"studies,":[73,162],"more":[74],"than":[75],"60":[76],"have":[78],"been":[79,126],"studied":[80],"relation":[82],"policy":[85],"incompliance.":[88],"Unfortunately,":[89],"no":[90],"clear":[91],"winners":[92],"can":[93,152],"be":[94,153,176],"among":[96],"or":[99],"theories":[101],"they":[102],"are":[103,222],"drawn":[104],"from.":[105],"Each":[106],"only":[110],"explains":[111],"a":[112,123,135,205],"small":[113],"part":[114],"variation":[117],"people's":[119],"behaviour":[120],"when":[122],"variable":[124],"has":[125],"multiple":[129],"findings":[132,147],"often":[133],"show":[134],"considerable":[136],"variation.":[137],"Research":[138],"limitations/implications":[139],"It":[141],"possible":[143],"disparate":[146],"reviewed":[150],"explained":[154],"by":[155],"sampling":[157],"methods":[158],"used":[159],"treatment/control":[164],"extraneous":[166],"interplay":[169,221],"between":[170],"variables.":[171],"These":[172],"aspects":[173],"ought":[174],"addressed":[177],"future":[179],"research":[180,236],"efforts.":[181],"Practical":[182],"implications":[183],"For":[185],"decision":[186],"makers":[187],"who":[188],"seek":[189],"guidance":[190],"on":[191,237],"best":[194],"achieve":[195],"their":[198,217],"should":[202],"recognize":[203],"large":[206],"number":[207],"probably":[210],"employees'":[212],"compliance.":[213],"addition,":[215],"both":[216],"strength":[219],"uncertain":[223],"largely":[225],"unknown.":[226],"Originality/value":[227],"first":[232],"organizations.":[247]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":23},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":31},{"year":2020,"cited_by_count":21},{"year":2019,"cited_by_count":23},{"year":2018,"cited_by_count":12},{"year":2017,"cited_by_count":19},{"year":2016,"cited_by_count":11},{"year":2015,"cited_by_count":9},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}