{"id":"https://openalex.org/W2912168694","doi":"https://doi.org/10.2308/isys-52381","title":"InfoSec Process Action Model (IPAM): Targeting Insiders' Weak Password Behavior","display_name":"InfoSec Process Action Model (IPAM): Targeting Insiders' Weak Password Behavior","publication_year":2019,"publication_date":"2019-02-01","ids":{"openalex":"https://openalex.org/W2912168694","doi":"https://doi.org/10.2308/isys-52381","mag":"2912168694"},"language":"en","primary_location":{"id":"doi:10.2308/isys-52381","is_oa":false,"landing_page_url":"https://doi.org/10.2308/isys-52381","pdf_url":null,"source":{"id":"https://openalex.org/S82262387","display_name":"Journal of Information Systems","issn_l":"0888-7985","issn":["0888-7985","1558-7959"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310316290","host_organization_name":"American Accounting Association","host_organization_lineage":["https://openalex.org/P4310316290"],"host_organization_lineage_names":["American Accounting Association"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5112408634","display_name":"Michael Curry","orcid":null},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael Curry","raw_affiliation_strings":["Oregon State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060334609","display_name":"Byron Marshall","orcid":"https://orcid.org/0000-0001-7109-6095"},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Byron Marshall","raw_affiliation_strings":["Oregon State University"],"raw_orcid":"https://orcid.org/0000-0001-7109-6095","affiliations":[{"raw_affiliation_string":"Oregon State University","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057459704","display_name":"John Correia","orcid":"https://orcid.org/0000-0002-9766-3542"},"institutions":[{"id":"https://openalex.org/I119888943","display_name":"Gonzaga University","ror":"https://ror.org/03ze70h02","country_code":"US","type":"education","lineage":["https://openalex.org/I119888943"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John Correia","raw_affiliation_strings":["Gonzaga University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Gonzaga University","institution_ids":["https://openalex.org/I119888943"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090489133","display_name":"Robert E. Crossler","orcid":"https://orcid.org/0000-0002-8179-9138"},"institutions":[{"id":"https://openalex.org/I72951846","display_name":"Washington State University","ror":"https://ror.org/05dk0ce17","country_code":"US","type":"education","lineage":["https://openalex.org/I72951846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert E. Crossler","raw_affiliation_strings":["Washington State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Washington State University","institution_ids":["https://openalex.org/I72951846"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.8213,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.92025431,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"33","issue":"3","first_page":"201","last_page":"225"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.7794526815414429},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.709092915058136},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.6826976537704468},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6209498643875122},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.603303849697113},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5748229622840881},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5133671164512634},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.4925852417945862},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.487674355506897},{"id":"https://openalex.org/keywords/measure","display_name":"Measure (data warehouse)","score":0.4713047444820404},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.34234070777893066},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.2996823191642761},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.26241815090179443},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.20846453309059143},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.16524183750152588},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11614108085632324},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.11050847172737122},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.06753745675086975}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.7794526815414429},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.709092915058136},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.6826976537704468},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6209498643875122},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.603303849697113},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5748229622840881},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5133671164512634},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.4925852417945862},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.487674355506897},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.4713047444820404},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.34234070777893066},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.2996823191642761},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.26241815090179443},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.20846453309059143},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.16524183750152588},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11614108085632324},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.11050847172737122},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.06753745675086975},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.2308/isys-52381","is_oa":false,"landing_page_url":"https://doi.org/10.2308/isys-52381","pdf_url":null,"source":{"id":"https://openalex.org/S82262387","display_name":"Journal of Information Systems","issn_l":"0888-7985","issn":["0888-7985","1558-7959"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310316290","host_organization_name":"American Accounting Association","host_organization_lineage":["https://openalex.org/P4310316290"],"host_organization_lineage_names":["American Accounting Association"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5099999904632568,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":92,"referenced_works":["https://openalex.org/W47747804","https://openalex.org/W129912261","https://openalex.org/W324885528","https://openalex.org/W922388168","https://openalex.org/W1504693860","https://openalex.org/W1517405889","https://openalex.org/W1589010984","https://openalex.org/W1602619638","https://openalex.org/W1792124015","https://openalex.org/W1818536883","https://openalex.org/W1822911239","https://openalex.org/W1829240630","https://openalex.org/W1917734991","https://openalex.org/W1969641949","https://openalex.org/W1980472098","https://openalex.org/W1980540325","https://openalex.org/W1983103629","https://openalex.org/W1987258130","https://openalex.org/W1988486314","https://openalex.org/W1993734008","https://openalex.org/W1997092577","https://openalex.org/W2003035249","https://openalex.org/W2005459083","https://openalex.org/W2009854363","https://openalex.org/W2010902645","https://openalex.org/W2016324762","https://openalex.org/W2020989719","https://openalex.org/W2024203493","https://openalex.org/W2025829466","https://openalex.org/W2029158761","https://openalex.org/W2036736987","https://openalex.org/W2037557484","https://openalex.org/W2041376403","https://openalex.org/W2042403281","https://openalex.org/W2045948582","https://openalex.org/W2056075452","https://openalex.org/W2056847254","https://openalex.org/W2059528567","https://openalex.org/W2060010505","https://openalex.org/W2070257463","https://openalex.org/W2075416597","https://openalex.org/W2081430061","https://openalex.org/W2081526168","https://openalex.org/W2091261347","https://openalex.org/W2097694607","https://openalex.org/W2099233982","https://openalex.org/W2099647042","https://openalex.org/W2099697766","https://openalex.org/W2110506823","https://openalex.org/W2113080184","https://openalex.org/W2118706223","https://openalex.org/W2129100925","https://openalex.org/W2132253094","https://openalex.org/W2133044046","https://openalex.org/W2133824719","https://openalex.org/W2134049139","https://openalex.org/W2140863794","https://openalex.org/W2142912849","https://openalex.org/W2146410840","https://openalex.org/W2150341374","https://openalex.org/W2150785224","https://openalex.org/W2163890779","https://openalex.org/W2184786010","https://openalex.org/W2196653212","https://openalex.org/W2408546867","https://openalex.org/W2415936530","https://openalex.org/W2522954953","https://openalex.org/W2529393112","https://openalex.org/W2785322747","https://openalex.org/W2801270982","https://openalex.org/W2801347047","https://openalex.org/W3021948815","https://openalex.org/W3143898318","https://openalex.org/W4230637740","https://openalex.org/W4236339161","https://openalex.org/W4240429374","https://openalex.org/W4242983372","https://openalex.org/W4285719527","https://openalex.org/W4292808503","https://openalex.org/W4367590697","https://openalex.org/W6601905391","https://openalex.org/W6624509574","https://openalex.org/W6634984985","https://openalex.org/W6676028428","https://openalex.org/W6679652390","https://openalex.org/W6687423169","https://openalex.org/W6716540698","https://openalex.org/W6775610859","https://openalex.org/W6822652223","https://openalex.org/W6831834494","https://openalex.org/W7061298245","https://openalex.org/W7062101557"],"related_works":["https://openalex.org/W143386018","https://openalex.org/W1004582678","https://openalex.org/W2656445685","https://openalex.org/W2115218409","https://openalex.org/W2090949570","https://openalex.org/W2263162522","https://openalex.org/W1989237518","https://openalex.org/W2134080857","https://openalex.org/W2002093701","https://openalex.org/W2207835792"],"abstract_inverted_index":{"ABSTRACT":[0],"The":[1,51,132],"possibility":[2],"of":[3,47,120],"noncompliant":[4],"behavior":[5,85,123],"is":[6,140],"a":[7,65,77],"challenge":[8],"for":[9,82,143],"cybersecurity":[10,130],"professionals":[11],"and":[12,39,43,62,145],"their":[13],"auditors":[14],"as":[15],"they":[16],"try":[17],"to":[18,55,92,108],"estimate":[19],"residual":[20],"control":[21,87],"risk.":[22],"Building":[23],"on":[24,105],"the":[25,45,57,96,125,136],"recently":[26],"proposed":[27],"InfoSec":[28],"Process":[29],"Action":[30],"Model":[31],"(IPAM),":[32],"this":[33],"work":[34],"explores":[35],"how":[36],"nontechnical":[37],"assessments":[38],"interventions":[40],"can":[41],"indicate":[42],"reduce":[44],"likelihood":[46],"risky":[48],"individual":[49,111,129],"behavior.":[50,113,131,149],"multi-stage":[52],"approach":[53,139],"seeks":[54],"bridge":[56],"well-known":[58],"gap":[59],"between":[60],"intent":[61],"action.":[63],"In":[64],"strong":[66,121],"password":[67,112,122],"creation":[68],"experiment":[69],"involving":[70],"229":[71],"participants,":[72],"IPAM":[73,138],"constructs":[74,98],"resulted":[75],"in":[76,80,117],"marked":[78],"increase":[79,116],"R2":[81],"initiating":[83],"compliance":[84,148],"with":[86],"expectations":[88],"from":[89],"47":[90],"percent":[91],"60":[93],"percent.":[94],"Importantly,":[95],"model":[97],"offer":[99],"measurable":[100],"indications":[101],"despite":[102],"practical":[103],"limitations":[104],"organizations'":[106],"ability":[107],"assess":[109],"problematic":[110],"A":[114],"threefold":[115],"one":[118],"measure":[119],"suggested":[124],"process":[126],"positively":[127],"impacted":[128],"results":[133],"suggest":[134],"that":[135],"process-nuanced":[137],"promising":[141],"both":[142],"assessing":[144],"impacting":[146],"security":[147]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":3},{"year":2019,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}