{"id":"https://openalex.org/W4371779546","doi":"https://doi.org/10.25300/misq/2022/15713","title":"Where is IT in Information Security? The Interrelationship among IT Investment, Security Awareness, and Data Breaches","display_name":"Where is IT in Information Security? The Interrelationship among IT Investment, Security Awareness, and Data Breaches","publication_year":2023,"publication_date":"2023-03-01","ids":{"openalex":"https://openalex.org/W4371779546","doi":"https://doi.org/10.25300/misq/2022/15713"},"language":"en","primary_location":{"id":"doi:10.25300/misq/2022/15713","is_oa":true,"landing_page_url":"https://doi.org/10.25300/misq/2022/15713","pdf_url":null,"source":{"id":"https://openalex.org/S57293258","display_name":"MIS Quarterly","issn_l":"0276-7783","issn":["0276-7783","2162-9730"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4327875293","host_organization_name":"MIS Quarterly","host_organization_lineage":["https://openalex.org/P4327875293"],"host_organization_lineage_names":["MIS Quarterly"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MIS Quarterly","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.25300/misq/2022/15713","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101687894","display_name":"Wilson Li","orcid":"https://orcid.org/0000-0001-8389-625X"},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wilson Weixun Li","raw_affiliation_strings":["Deakin Business School, Deakin University Burwood, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Deakin Business School, Deakin University Burwood, Australia","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072899030","display_name":"Alvin Chung Man Leung","orcid":"https://orcid.org/0000-0001-8961-8357"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Alvin Chung Man Leung","raw_affiliation_strings":["Department of Information Systems, College of Business, City University of Hong Kong Kowloon, Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Systems, College of Business, City University of Hong Kong Kowloon, Hong Kong","institution_ids":["https://openalex.org/I168719708"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084398278","display_name":"Wei Thoo Yue","orcid":"https://orcid.org/0000-0002-1344-153X"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Wei Thoo Yue","raw_affiliation_strings":["Department of Information Systems, College of Business, City University of Hong Kong Kowloon, Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Systems, College of Business, City University of Hong Kong Kowloon, Hong Kong","institution_ids":["https://openalex.org/I168719708"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":22.7518,"has_fulltext":false,"cited_by_count":57,"citation_normalized_percentile":{"value":0.99500161,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"47","issue":"1","first_page":"317","last_page":"342"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9797000288963318,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.9337000250816345,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/countermeasure","display_name":"Countermeasure","score":0.8401614427566528},{"id":"https://openalex.org/keywords/data-breach","display_name":"Data breach","score":0.7965052127838135},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.7120389938354492},{"id":"https://openalex.org/keywords/mindset","display_name":"Mindset","score":0.6909353733062744},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.6396828293800354},{"id":"https://openalex.org/keywords/reputation","display_name":"Reputation","score":0.6126636266708374},{"id":"https://openalex.org/keywords/investment","display_name":"Investment (military)","score":0.5435107350349426},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.5116077065467834},{"id":"https://openalex.org/keywords/security-awareness","display_name":"Security awareness","score":0.4705389142036438},{"id":"https://openalex.org/keywords/information-security-management","display_name":"Information security management","score":0.4544643759727478},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.45404234528541565},{"id":"https://openalex.org/keywords/asset","display_name":"Asset (computer security)","score":0.4430463910102844},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.29281800985336304},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.2755573093891144},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.104572594165802},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.07048225402832031},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.067385733127594}],"concepts":[{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.8401614427566528},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.7965052127838135},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.7120389938354492},{"id":"https://openalex.org/C2778491294","wikidata":"https://www.wikidata.org/wiki/Q1339824","display_name":"Mindset","level":2,"score":0.6909353733062744},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.6396828293800354},{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.6126636266708374},{"id":"https://openalex.org/C27548731","wikidata":"https://www.wikidata.org/wiki/Q88272","display_name":"Investment (military)","level":3,"score":0.5435107350349426},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.5116077065467834},{"id":"https://openalex.org/C2778652015","wikidata":"https://www.wikidata.org/wiki/Q7445019","display_name":"Security awareness","level":3,"score":0.4705389142036438},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.4544643759727478},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45404234528541565},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.4430463910102844},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.29281800985336304},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.2755573093891144},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.104572594165802},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.07048225402832031},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.067385733127594},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.25300/misq/2022/15713","is_oa":true,"landing_page_url":"https://doi.org/10.25300/misq/2022/15713","pdf_url":null,"source":{"id":"https://openalex.org/S57293258","display_name":"MIS Quarterly","issn_l":"0276-7783","issn":["0276-7783","2162-9730"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4327875293","host_organization_name":"MIS Quarterly","host_organization_lineage":["https://openalex.org/P4327875293"],"host_organization_lineage_names":["MIS Quarterly"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MIS Quarterly","raw_type":"journal-article"},{"id":"pmh:oai:pure.atira.dk:publications/79fefd8f-5d0b-4e6f-bb73-0a141df4b94d","is_oa":true,"landing_page_url":"https://hdl.handle.net/2031/79fefd8f-5d0b-4e6f-bb73-0a141df4b94d","pdf_url":null,"source":{"id":"https://openalex.org/S7407055387","display_name":"CityU Scholars","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Li, W W, Leung, A C M & Yue, W T 2023, 'Where is IT in Information Security? The Interrelationship among IT Investment, Security Awareness, and Data Breaches', MIS Quarterly, vol. 47, no. 1, pp. 317-342. https://doi.org/10.25300/misq/2022/15713","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.25300/misq/2022/15713","is_oa":true,"landing_page_url":"https://doi.org/10.25300/misq/2022/15713","pdf_url":null,"source":{"id":"https://openalex.org/S57293258","display_name":"MIS Quarterly","issn_l":"0276-7783","issn":["0276-7783","2162-9730"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4327875293","host_organization_name":"MIS Quarterly","host_organization_lineage":["https://openalex.org/P4327875293"],"host_organization_lineage_names":["MIS Quarterly"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MIS Quarterly","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":99,"referenced_works":["https://openalex.org/W195544187","https://openalex.org/W196357788","https://openalex.org/W1480194269","https://openalex.org/W1482734477","https://openalex.org/W1525336696","https://openalex.org/W1533444565","https://openalex.org/W1534941172","https://openalex.org/W1562591834","https://openalex.org/W1960512150","https://openalex.org/W1966884856","https://openalex.org/W1968584218","https://openalex.org/W1969641949","https://openalex.org/W1974933478","https://openalex.org/W1975994995","https://openalex.org/W1985822778","https://openalex.org/W1986115710","https://openalex.org/W1986887428","https://openalex.org/W1988315607","https://openalex.org/W1995082048","https://openalex.org/W1997537847","https://openalex.org/W1997901747","https://openalex.org/W2000431168","https://openalex.org/W2006553501","https://openalex.org/W2020989719","https://openalex.org/W2023128806","https://openalex.org/W2025610165","https://openalex.org/W2034785598","https://openalex.org/W2041550145","https://openalex.org/W2041778287","https://openalex.org/W2056075452","https://openalex.org/W2058012887","https://openalex.org/W2069700160","https://openalex.org/W2074685945","https://openalex.org/W2075765289","https://openalex.org/W2079037403","https://openalex.org/W2080940090","https://openalex.org/W2097580026","https://openalex.org/W2105555104","https://openalex.org/W2105992541","https://openalex.org/W2119587968","https://openalex.org/W2122193960","https://openalex.org/W2123192905","https://openalex.org/W2127150125","https://openalex.org/W2133875455","https://openalex.org/W2138653284","https://openalex.org/W2144958981","https://openalex.org/W2157635163","https://openalex.org/W2166831763","https://openalex.org/W2174850379","https://openalex.org/W2178225550","https://openalex.org/W2201765800","https://openalex.org/W2219986456","https://openalex.org/W2275949942","https://openalex.org/W2291072898","https://openalex.org/W2339294710","https://openalex.org/W2517222954","https://openalex.org/W2586679283","https://openalex.org/W2748388916","https://openalex.org/W2792656975","https://openalex.org/W2796001969","https://openalex.org/W2803110595","https://openalex.org/W2803655257","https://openalex.org/W2804319051","https://openalex.org/W2889135055","https://openalex.org/W2899789890","https://openalex.org/W2900622889","https://openalex.org/W2920128231","https://openalex.org/W2940106403","https://openalex.org/W2947839146","https://openalex.org/W2985776815","https://openalex.org/W3004408380","https://openalex.org/W3005567324","https://openalex.org/W3007177564","https://openalex.org/W3009544789","https://openalex.org/W3026713463","https://openalex.org/W3082241489","https://openalex.org/W3082414976","https://openalex.org/W3085353310","https://openalex.org/W3112535516","https://openalex.org/W3121571851","https://openalex.org/W3122167728","https://openalex.org/W3122189568","https://openalex.org/W3124301357","https://openalex.org/W3125393355","https://openalex.org/W3126031036","https://openalex.org/W3139650183","https://openalex.org/W3143589570","https://openalex.org/W3145342109","https://openalex.org/W3146101648","https://openalex.org/W3146559281","https://openalex.org/W3158068843","https://openalex.org/W4206105075","https://openalex.org/W4238061345","https://openalex.org/W6630690391","https://openalex.org/W6697741058","https://openalex.org/W6745926426","https://openalex.org/W6770707809","https://openalex.org/W6788479480","https://openalex.org/W6789950716"],"related_works":["https://openalex.org/W2966027630","https://openalex.org/W2099222119","https://openalex.org/W2188034213","https://openalex.org/W2544387082","https://openalex.org/W2017328197","https://openalex.org/W1974991139","https://openalex.org/W2185133343","https://openalex.org/W2146019828","https://openalex.org/W1807507413","https://openalex.org/W626714893"],"abstract_inverted_index":{"Data":[0],"breaches":[1,51],"can":[2],"severely":[3],"damage":[4],"a":[5],"firm\u2019s":[6],"reputation":[7],"and":[8,36,49,55,96,128,134],"its":[9],"customers\u2019":[10],"confidence.":[11],"Firms":[12],"must":[13],"therefore":[14],"continuously":[15],"invest":[16],"in":[17,84,87],"security":[18,28,57,110,127],"measures":[19],"to":[20,67,98,137],"prevent":[21],"such":[22],"breaches.":[23,150],"However,":[24],"the":[25,40,121,139,146],"effectiveness":[26],"of":[27,63,102,124,148],"investment":[29,48,111],"has":[30],"been":[31],"questioned":[32],"by":[33,53,81],"both":[34,131],"practitioners":[35],"academics.":[37],"We":[38],"illustrate":[39],"bidirectional":[41],"dynamic":[42],"relationship":[43],"between":[44],"information":[45],"technology":[46],"(IT)":[47],"data":[50,149],"moderated":[52],"threat":[54,72,132],"countermeasure":[56,135],"awareness":[58,73,90,133,136],"using":[59],"an":[60],"eight-year":[61],"panel":[62],"311":[64],"U.S.-listed":[65],"firms":[66,92,117],"provide":[68],"empirical":[69],"evidence":[70],"that":[71,116,144],"broadens":[74],"firms\u2019":[75],"scope":[76],"for":[77],"addressing":[78],"data-breach":[79],"issues":[80,143],"investing":[82],"more":[83,106],"IT":[85,141],"than":[86,109],"security.":[88],"Countermeasure":[89],"equips":[91],"with":[93],"sufficient":[94],"knowledge":[95],"experience":[97],"ensure":[99],"effective":[100],"implementation":[101],"IT,":[103],"which":[104],"provides":[105],"comprehensive":[107],"protection":[108],"alone.":[112],"Our":[113],"results":[114],"suggest":[115],"should":[118],"evolve":[119],"beyond":[120],"reactive":[122],"mindset":[123],"solely":[125],"upgrading":[126],"begin":[129],"nurturing":[130],"address":[138],"underlying":[140],"system":[142],"are":[145],"cause":[147]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":19},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-04T07:58:01.006859","created_date":"2025-10-10T00:00:00"}