{"id":"https://openalex.org/W2786705330","doi":"https://doi.org/10.25300/misq/2018/13853","title":"Toward a Unified Model of Information Security Policy Compliance1","display_name":"Toward a Unified Model of Information Security Policy Compliance1","publication_year":2018,"publication_date":"2018-01-29","ids":{"openalex":"https://openalex.org/W2786705330","doi":"https://doi.org/10.25300/misq/2018/13853","mag":"2786705330"},"language":"en","primary_location":{"id":"doi:10.25300/misq/2018/13853","is_oa":false,"landing_page_url":"https://doi.org/10.25300/misq/2018/13853","pdf_url":null,"source":{"id":"https://openalex.org/S57293258","display_name":"MIS Quarterly","issn_l":"0276-7783","issn":["0276-7783","2162-9730"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4327875293","host_organization_name":"MIS Quarterly","host_organization_lineage":["https://openalex.org/P4327875293"],"host_organization_lineage_names":["MIS Quarterly"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MIS Quarterly","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://jyx.jyu.fi/bitstreams/db08075c-50bd-4e55-becf-975b94c9a7b2/download","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073948873","display_name":"Gregory D. Moody","orcid":"https://orcid.org/0000-0001-7287-7336"},"institutions":[{"id":"https://openalex.org/I133999245","display_name":"University of Nevada, Las Vegas","ror":"https://ror.org/0406gha72","country_code":"US","type":"education","lineage":["https://openalex.org/I133999245"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gregory D. Moody","raw_affiliation_strings":["University of Nevada, Las Vegas, 4505 S. Maryland Parkway, Las Vegas, NV 89154 U.S.A"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Nevada, Las Vegas, 4505 S. Maryland Parkway, Las Vegas, NV 89154 U.S.A","institution_ids":["https://openalex.org/I133999245"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058697220","display_name":"Mikko Siponen","orcid":"https://orcid.org/0000-0001-7041-1313"},"institutions":[{"id":"https://openalex.org/I1323252656","display_name":"Information Technology University","ror":"https://ror.org/00ngv8j44","country_code":"PK","type":"education","lineage":["https://openalex.org/I1323252656"]},{"id":"https://openalex.org/I94722563","display_name":"University of Jyv\u00e4skyl\u00e4","ror":"https://ror.org/05n3dz165","country_code":"FI","type":"education","lineage":["https://openalex.org/I94722563"]}],"countries":["FI","PK"],"is_corresponding":false,"raw_author_name":"Mikko Siponen","raw_affiliation_strings":["Faculty of Information Technology, University of Jyv\u00e4skyl\u00e4, P.O. Box 35, FI-40014 Jyv\u00e4skyl\u00e4 Finland","Faculty of Information Technology, University of Jyv\u00e4skyl\u00e4, P.O. Box 35, FI-40014 Jyv\u00e4skyl\u00e4 FINLAND"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, University of Jyv\u00e4skyl\u00e4, P.O. Box 35, FI-40014 Jyv\u00e4skyl\u00e4 Finland","institution_ids":["https://openalex.org/I94722563"]},{"raw_affiliation_string":"Faculty of Information Technology, University of Jyv\u00e4skyl\u00e4, P.O. Box 35, FI-40014 Jyv\u00e4skyl\u00e4 FINLAND","institution_ids":["https://openalex.org/I94722563","https://openalex.org/I1323252656"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012513695","display_name":"Seppo Pahnila","orcid":null},"institutions":[{"id":"https://openalex.org/I63586086","display_name":"Oulu University of Applied Sciences","ror":"https://ror.org/03dvp8k55","country_code":"FI","type":"education","lineage":["https://openalex.org/I63586086"]},{"id":"https://openalex.org/I98381234","display_name":"University of Oulu","ror":"https://ror.org/03yj89h83","country_code":"FI","type":"education","lineage":["https://openalex.org/I98381234"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Seppo Pahnila","raw_affiliation_strings":["Faculty of Information Technology and Electrical Engineering, University of Oulu, P.O. Box 8000, FI-90014 Oulu Finland","Faculty of Information Technology and Electrical Engineering, University of Oulu, P.O. Box 8000, FI-90014 Oulu FINLAND"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology and Electrical Engineering, University of Oulu, P.O. Box 8000, FI-90014 Oulu Finland","institution_ids":["https://openalex.org/I98381234","https://openalex.org/I63586086"]},{"raw_affiliation_string":"Faculty of Information Technology and Electrical Engineering, University of Oulu, P.O. Box 8000, FI-90014 Oulu FINLAND","institution_ids":["https://openalex.org/I98381234"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":74.0282,"has_fulltext":true,"cited_by_count":441,"citation_normalized_percentile":{"value":0.99907355,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"42","issue":"1","first_page":"285","last_page":"311"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9876999855041504,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.8367104530334473},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.6209641695022583},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.5828595161437988},{"id":"https://openalex.org/keywords/information-systems-security","display_name":"Information systems security","score":0.5826985836029053},{"id":"https://openalex.org/keywords/standard-of-good-practice","display_name":"Standard of Good Practice","score":0.5391860604286194},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.5231562852859497},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4874715805053711},{"id":"https://openalex.org/keywords/information-security-management","display_name":"Information security management","score":0.4523821175098419},{"id":"https://openalex.org/keywords/information-security-standards","display_name":"Information security standards","score":0.4408157467842102},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.42729657888412476},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.31857043504714966},{"id":"https://openalex.org/keywords/information-system","display_name":"Information system","score":0.2916316092014313},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.27517616748809814},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.2652149796485901},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.2530933618545532},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.22533005475997925},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.19586265087127686},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.18044713139533997},{"id":"https://openalex.org/keywords/management-information-systems","display_name":"Management information systems","score":0.12538579106330872},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.07611212134361267}],"concepts":[{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.8367104530334473},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.6209641695022583},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.5828595161437988},{"id":"https://openalex.org/C2988319471","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information systems security","level":4,"score":0.5826985836029053},{"id":"https://openalex.org/C47309137","wikidata":"https://www.wikidata.org/wiki/Q7598357","display_name":"Standard of Good Practice","level":5,"score":0.5391860604286194},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.5231562852859497},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4874715805053711},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.4523821175098419},{"id":"https://openalex.org/C139547956","wikidata":"https://www.wikidata.org/wiki/Q6031202","display_name":"Information security standards","level":5,"score":0.4408157467842102},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.42729657888412476},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.31857043504714966},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.2916316092014313},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.27517616748809814},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.2652149796485901},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.2530933618545532},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.22533005475997925},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.19586265087127686},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.18044713139533997},{"id":"https://openalex.org/C29848774","wikidata":"https://www.wikidata.org/wiki/Q61905","display_name":"Management information systems","level":3,"score":0.12538579106330872},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.07611212134361267},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.25300/misq/2018/13853","is_oa":false,"landing_page_url":"https://doi.org/10.25300/misq/2018/13853","pdf_url":null,"source":{"id":"https://openalex.org/S57293258","display_name":"MIS Quarterly","issn_l":"0276-7783","issn":["0276-7783","2162-9730"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4327875293","host_organization_name":"MIS Quarterly","host_organization_lineage":["https://openalex.org/P4327875293"],"host_organization_lineage_names":["MIS Quarterly"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MIS Quarterly","raw_type":"journal-article"},{"id":"pmh:oai:jyx.jyu.fi:123456789/60225","is_oa":true,"landing_page_url":"http://urn.fi/URN:NBN:fi:jyu-201811164752","pdf_url":"https://jyx.jyu.fi/bitstreams/db08075c-50bd-4e55-becf-975b94c9a7b2/download","source":{"id":"https://openalex.org/S4306400563","display_name":"Jyv\u00e4skyl\u00e4 University Digital Archive (University of Jyv\u00e4skyl\u00e4)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I94722563","host_organization_name":"University of Jyv\u00e4skyl\u00e4","host_organization_lineage":["https://openalex.org/I94722563"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"A2"}],"best_oa_location":{"id":"pmh:oai:jyx.jyu.fi:123456789/60225","is_oa":true,"landing_page_url":"http://urn.fi/URN:NBN:fi:jyu-201811164752","pdf_url":"https://jyx.jyu.fi/bitstreams/db08075c-50bd-4e55-becf-975b94c9a7b2/download","source":{"id":"https://openalex.org/S4306400563","display_name":"Jyv\u00e4skyl\u00e4 University Digital Archive (University of Jyv\u00e4skyl\u00e4)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I94722563","host_organization_name":"University of Jyv\u00e4skyl\u00e4","host_organization_lineage":["https://openalex.org/I94722563"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"A2"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321108","display_name":"Academy of Finland","ror":"https://ror.org/05k73zm37"},{"id":"https://openalex.org/F4320321855","display_name":"Tekes","ror":"https://ror.org/02ag8cq23"},{"id":"https://openalex.org/F4320335322","display_name":"European Regional Development Fund","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2786705330.pdf","grobid_xml":"https://content.openalex.org/works/W2786705330.grobid-xml"},"referenced_works_count":98,"referenced_works":["https://openalex.org/W129912261","https://openalex.org/W142368876","https://openalex.org/W324885528","https://openalex.org/W591137247","https://openalex.org/W1480957135","https://openalex.org/W1500900393","https://openalex.org/W1517229207","https://openalex.org/W1536398137","https://openalex.org/W1538043169","https://openalex.org/W1545040377","https://openalex.org/W1545612752","https://openalex.org/W1552760408","https://openalex.org/W1602619638","https://openalex.org/W1863383349","https://openalex.org/W1901676853","https://openalex.org/W1964009157","https://openalex.org/W1964088509","https://openalex.org/W1969641949","https://openalex.org/W1971368595","https://openalex.org/W1978993029","https://openalex.org/W1983238775","https://openalex.org/W1987381312","https://openalex.org/W1988734357","https://openalex.org/W2000667443","https://openalex.org/W2007227619","https://openalex.org/W2010453024","https://openalex.org/W2010902645","https://openalex.org/W2013587720","https://openalex.org/W2017785078","https://openalex.org/W2019356367","https://openalex.org/W2024419606","https://openalex.org/W2025829466","https://openalex.org/W2031791082","https://openalex.org/W2033213440","https://openalex.org/W2036389121","https://openalex.org/W2036762550","https://openalex.org/W2037129160","https://openalex.org/W2045371085","https://openalex.org/W2050170171","https://openalex.org/W2052372924","https://openalex.org/W2059396148","https://openalex.org/W2060010505","https://openalex.org/W2062477794","https://openalex.org/W2065953084","https://openalex.org/W2069015912","https://openalex.org/W2072047708","https://openalex.org/W2078948247","https://openalex.org/W2081430061","https://openalex.org/W2083030076","https://openalex.org/W2083213605","https://openalex.org/W2085901425","https://openalex.org/W2088252829","https://openalex.org/W2089747976","https://openalex.org/W2091106293","https://openalex.org/W2091172976","https://openalex.org/W2091261347","https://openalex.org/W2095058980","https://openalex.org/W2097694607","https://openalex.org/W2098869960","https://openalex.org/W2099647042","https://openalex.org/W2100379340","https://openalex.org/W2100797043","https://openalex.org/W2101179869","https://openalex.org/W2105992541","https://openalex.org/W2106316689","https://openalex.org/W2109706498","https://openalex.org/W2111230857","https://openalex.org/W2114751941","https://openalex.org/W2125275681","https://openalex.org/W2130533816","https://openalex.org/W2131994649","https://openalex.org/W2134740567","https://openalex.org/W2143235290","https://openalex.org/W2144115372","https://openalex.org/W2152117784","https://openalex.org/W2170554716","https://openalex.org/W2170899042","https://openalex.org/W2189821821","https://openalex.org/W2277573746","https://openalex.org/W2290583609","https://openalex.org/W2323132578","https://openalex.org/W2337703333","https://openalex.org/W2622838936","https://openalex.org/W2801387997","https://openalex.org/W3121431905","https://openalex.org/W3125449341","https://openalex.org/W3125976894","https://openalex.org/W3215835730","https://openalex.org/W4210995839","https://openalex.org/W4233035480","https://openalex.org/W4246765341","https://openalex.org/W4253896747","https://openalex.org/W4254451175","https://openalex.org/W4292808503","https://openalex.org/W4300107936","https://openalex.org/W4301032116","https://openalex.org/W4302214455","https://openalex.org/W4388170798"],"related_works":["https://openalex.org/W40842196","https://openalex.org/W2049188895","https://openalex.org/W2126017555","https://openalex.org/W2584162156","https://openalex.org/W2000891179","https://openalex.org/W1567258312","https://openalex.org/W2483557577","https://openalex.org/W2003676537","https://openalex.org/W2474818065","https://openalex.org/W3127569544"],"abstract_inverted_index":{"Information":[0],"systems":[1],"security":[2,12,29,50],"(ISS)":[3],"behavioral":[4],"research":[5,170,240],"has":[6],"produced":[7],"different":[8,167,182,207],"models":[9,163],"to":[10,159,173,175,196,201,204,216,236,241],"explain":[11,181],"policy":[13,51,211],"compliance.":[14],"This":[15],"paper":[16],"(1)":[17,86],"reviews":[18],"11":[19,82],"theories":[20,36,83,252],"that":[21,257],"have":[22,164],"served":[23],"the":[24,45,65,79,87,97,102,108,114,119,132,137,144,157,161,178,194,198,214,218,223,232,247,254],"majority":[25],"of":[26,48,89,104,110,134,184,209,226],"previous":[27],"information":[28,49],"behavior":[30],"models,":[31],"(2)":[32,92],"empirically":[33,63,155,245],"compares":[34],"these":[35,58],"(Study":[37,71],"1),":[38],"(3)":[39,96],"proposes":[40],"a":[41,68],"unified":[42,46],"model,":[43,100,141],"called":[44],"model":[47],"compliance":[52],"(UMISPC),":[53],"which":[54,73,160,197,217],"integrates":[55],"elements":[56],"across":[57],"extant":[59],"theories,":[60],"and":[61,127,142,166,213,244],"(4)":[62,101],"tests":[64],"UMISPC":[66,149,179,199,219,233],"in":[67,253],"new":[69],"study":[70],"2),":[72],"provided":[74],"preliminary":[75],"empirical":[76],"support":[77],"for":[78,206],"model.":[80],"The":[81,148],"reviewed":[84],"are":[85,258],"theory":[88,103,109,126,133],"reasoned":[90],"action,":[91],"neutrali-":[93],"zation":[94],"techniques,":[95],"health":[98],"belief":[99],"planned":[105],"behavior,":[106,112],"(5)":[107],"interpersonal":[111],"(6)":[113],"protection":[115,121],"motivation":[116,122],"theory,":[117,123,130],"(7)":[118],"extended":[120,138],"(8)":[124],"deterrence":[125],"rational":[128],"choice":[129],"(9)":[131],"self-regulation,":[135],"(10)":[136],"parallel":[139],"processing":[140],"(11)":[143],"control":[145],"balance":[146],"theory.":[147],"is":[150,171,220,234],"an":[151],"initial":[152],"step":[153],"toward":[154],"examining":[156],"extent":[158,177,195,215],"existing":[162],"similar":[165],"constructs.":[168],"Future":[169],"needed":[172],"examine":[174],"what":[176],"can":[180],"types":[183,208,225],"ISS":[185,210,227,239,255],"behaviors":[186],"(or":[187],"intentions":[188],"thereof).":[189],"Such":[190],"studies":[191],"will":[192],"determine":[193],"needs":[200],"be":[202],"revised":[203],"account":[205],"violations":[212,228],"generalizable":[221],"beyond":[222],"three":[224],"we":[229],"examined.":[230],"Finally,":[231],"intended":[235],"inspire":[237],"future":[238],"further":[242],"theorize":[243],"demonstrate":[246],"important":[248],"differences":[249],"between":[250],"rival":[251],"context":[256],"not":[259],"captured":[260],"by":[261],"current":[262],"measures.":[263]},"counts_by_year":[{"year":2026,"cited_by_count":23},{"year":2025,"cited_by_count":59},{"year":2024,"cited_by_count":52},{"year":2023,"cited_by_count":67},{"year":2022,"cited_by_count":58},{"year":2021,"cited_by_count":80},{"year":2020,"cited_by_count":44},{"year":2019,"cited_by_count":42},{"year":2018,"cited_by_count":14}],"updated_date":"2026-06-19T17:40:00.097472","created_date":"2025-10-10T00:00:00"}