{"id":"https://openalex.org/W7115888446","doi":"https://doi.org/10.3390/jcp5040113","title":"Exploring Determinants of Information Security Systems Adoption in Saudi Arabian SMEs: An Integrated Multitheoretical Model","display_name":"Exploring Determinants of Information Security Systems Adoption in Saudi Arabian SMEs: An Integrated Multitheoretical Model","publication_year":2025,"publication_date":"2025-12-18","ids":{"openalex":"https://openalex.org/W7115888446","doi":"https://doi.org/10.3390/jcp5040113"},"language":"en","primary_location":{"id":"doi:10.3390/jcp5040113","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040113","pdf_url":"https://www.mdpi.com/2624-800X/5/4/113/pdf?version=1766067071","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/5/4/113/pdf?version=1766067071","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Ali Abdu M Dighriri","orcid":null},"institutions":[{"id":"https://openalex.org/I188329596","display_name":"University of Canberra","ror":"https://ror.org/04s1nv328","country_code":"AU","type":"education","lineage":["https://openalex.org/I188329596"]},{"id":"https://openalex.org/I2801453606","display_name":"Australian Government","ror":"https://ror.org/0314h5y94","country_code":"AU","type":"government","lineage":["https://openalex.org/I2801453606"]},{"id":"https://openalex.org/I91450128","display_name":"Jazan University","ror":"https://ror.org/02bjnq803","country_code":"SA","type":"education","lineage":["https://openalex.org/I91450128"]}],"countries":["AU","SA"],"is_corresponding":true,"raw_author_name":"Ali Abdu M Dighriri","raw_affiliation_strings":["Department of Management Information Systems, Faculty of Business, Jazan University, Jazan 45142, Saudi Arabia","Faculty of Business, Government & Law, University of Canberra, Bruce, ACT 2601, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Management Information Systems, Faculty of Business, Jazan University, Jazan 45142, Saudi Arabia","institution_ids":["https://openalex.org/I91450128"]},{"raw_affiliation_string":"Faculty of Business, Government & Law, University of Canberra, Bruce, ACT 2601, Australia","institution_ids":["https://openalex.org/I188329596","https://openalex.org/I2801453606"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Sarvjeet Kaur Chatrath","orcid":null},"institutions":[{"id":"https://openalex.org/I188329596","display_name":"University of Canberra","ror":"https://ror.org/04s1nv328","country_code":"AU","type":"education","lineage":["https://openalex.org/I188329596"]},{"id":"https://openalex.org/I2801453606","display_name":"Australian Government","ror":"https://ror.org/0314h5y94","country_code":"AU","type":"government","lineage":["https://openalex.org/I2801453606"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sarvjeet Kaur Chatrath","raw_affiliation_strings":["Faculty of Business, Government & Law, University of Canberra, Bruce, ACT 2601, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Business, Government & Law, University of Canberra, Bruce, ACT 2601, Australia","institution_ids":["https://openalex.org/I188329596","https://openalex.org/I2801453606"]}]},{"author_position":"last","author":{"id":null,"display_name":"Masoud Mohammadian","orcid":null},"institutions":[{"id":"https://openalex.org/I188329596","display_name":"University of Canberra","ror":"https://ror.org/04s1nv328","country_code":"AU","type":"education","lineage":["https://openalex.org/I188329596"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Masoud Mohammadian","raw_affiliation_strings":["Faculty of Science and Technology, University of Canberra, Bruce, ACT 2617, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Science and Technology, University of Canberra, Bruce, ACT 2617, Australia","institution_ids":["https://openalex.org/I188329596"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I188329596","https://openalex.org/I2801453606","https://openalex.org/I91450128"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1114},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1114},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.68648385,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"5","issue":"4","first_page":"113","last_page":"113"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8044000267982483,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8044000267982483,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10068","display_name":"Technology Adoption and User Behaviour","score":0.04740000143647194,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.011500000022351742,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.7802000045776367},{"id":"https://openalex.org/keywords/information-security-management","display_name":"Information security management","score":0.6863999962806702},{"id":"https://openalex.org/keywords/profitability-index","display_name":"Profitability index","score":0.59579998254776},{"id":"https://openalex.org/keywords/information-security-management-system","display_name":"Information security management system","score":0.569599986076355},{"id":"https://openalex.org/keywords/information-system","display_name":"Information system","score":0.4952999949455261},{"id":"https://openalex.org/keywords/information-systems-security","display_name":"Information systems security","score":0.4950000047683716},{"id":"https://openalex.org/keywords/information-technology","display_name":"Information technology","score":0.46619999408721924},{"id":"https://openalex.org/keywords/security-awareness","display_name":"Security awareness","score":0.4088999927043915},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.3889000117778778}],"concepts":[{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.7802000045776367},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.6863999962806702},{"id":"https://openalex.org/C129361004","wikidata":"https://www.wikidata.org/wiki/Q2470236","display_name":"Profitability index","level":2,"score":0.59579998254776},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5911999940872192},{"id":"https://openalex.org/C111153917","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management system","level":5,"score":0.569599986076355},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.5156999826431274},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.4952999949455261},{"id":"https://openalex.org/C2988319471","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information systems security","level":4,"score":0.4950000047683716},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.46619999408721924},{"id":"https://openalex.org/C2778652015","wikidata":"https://www.wikidata.org/wiki/Q7445019","display_name":"Security awareness","level":3,"score":0.4088999927043915},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.3889000117778778},{"id":"https://openalex.org/C128487930","wikidata":"https://www.wikidata.org/wiki/Q579488","display_name":"Information management","level":2,"score":0.3734000027179718},{"id":"https://openalex.org/C47309137","wikidata":"https://www.wikidata.org/wiki/Q7598357","display_name":"Standard of Good Practice","level":5,"score":0.3628999888896942},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3569999933242798},{"id":"https://openalex.org/C139547956","wikidata":"https://www.wikidata.org/wiki/Q6031202","display_name":"Information security standards","level":5,"score":0.3531999886035919},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.3481000065803528},{"id":"https://openalex.org/C29848774","wikidata":"https://www.wikidata.org/wiki/Q61905","display_name":"Management information systems","level":3,"score":0.3398999869823456},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.33009999990463257},{"id":"https://openalex.org/C2776185967","wikidata":"https://www.wikidata.org/wiki/Q112945","display_name":"Technology acceptance model","level":3,"score":0.32899999618530273},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.3066999912261963},{"id":"https://openalex.org/C2780795517","wikidata":"https://www.wikidata.org/wiki/Q6030997","display_name":"Information assurance","level":3,"score":0.30399999022483826},{"id":"https://openalex.org/C180823521","wikidata":"https://www.wikidata.org/wiki/Q1662502","display_name":"Certified Information Security Manager","level":5,"score":0.29589998722076416},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.2953000068664551},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.289900004863739},{"id":"https://openalex.org/C123269153","wikidata":"https://www.wikidata.org/wiki/Q1897038","display_name":"Theory of reasoned action","level":2,"score":0.289000004529953},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.2888999879360199},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.28189998865127563},{"id":"https://openalex.org/C48879800","wikidata":"https://www.wikidata.org/wiki/Q622439","display_name":"Small and medium-sized enterprises","level":2,"score":0.2678000032901764},{"id":"https://openalex.org/C89785696","wikidata":"https://www.wikidata.org/wiki/Q2290753","display_name":"Theory of planned behavior","level":3,"score":0.2639999985694885},{"id":"https://openalex.org/C17520342","wikidata":"https://www.wikidata.org/wiki/Q7797190","display_name":"Threat","level":5,"score":0.2635999917984009},{"id":"https://openalex.org/C39358052","wikidata":"https://www.wikidata.org/wiki/Q2578632","display_name":"Information security audit","level":5,"score":0.2535000145435333}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/jcp5040113","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040113","pdf_url":"https://www.mdpi.com/2624-800X/5/4/113/pdf?version=1766067071","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:db51883679b74294895b2957f1d92f52","is_oa":true,"landing_page_url":"https://doaj.org/article/db51883679b74294895b2957f1d92f52","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 5, Iss 4, p 113 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp5040113","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040113","pdf_url":"https://www.mdpi.com/2624-800X/5/4/113/pdf?version=1766067071","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5413818359375,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7115888446.pdf","grobid_xml":"https://content.openalex.org/works/W7115888446.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"High":[0],"cybersecurity":[1],"risks":[2],"and":[3,12,16,21,38,77,82,109,121,131,155,179,203,210,235],"attacks":[4],"cause":[5],"information":[6,31,41,207,213],"theft,":[7],"unauthorized":[8],"access":[9],"to":[10,29,47,126,230],"data":[11],"information,":[13],"reputational":[14],"damage,":[15],"financial":[17],"loss":[18],"in":[19,59,135,138,168,244],"small":[20],"medium":[22],"enterprises":[23],"(SMEs).":[24],"This":[25,44],"creates":[26],"a":[27,159],"need":[28],"adopt":[30],"security":[32,42,105,153,208,214],"systems":[33,58],"of":[34,56,73,80,84,90,96,114,116,174,185,193,233,242],"SMEs":[35,60,136,243],"through":[36],"innovation":[37],"compliance":[39,211],"with":[40,212],"policies.":[43],"study":[45,143,224],"seeks":[46],"develop":[48],"an":[49,197],"integrated":[50,198],"research":[51],"model":[52,70],"assessing":[53],"the":[54,67,172,183,231,240],"adoption":[55,115,173,192],"InfoSec":[57,98,117,165,175,194],"based":[61],"on":[62,162,188],"three":[63],"existing":[64],"theories,":[65],"namely":[66],"technology":[68,85],"acceptance":[69,81],"(TAM),":[71],"theory":[72,79],"reasoned":[74],"action":[75],"(TRA),":[76],"unified":[78],"use":[83],"(UTAUT).":[86],"A":[87,119],"thorough":[88],"review":[89],"literature":[91],"identified":[92],"prior":[93,146],"experience,":[94,147],"enjoyment":[95],"new":[97],"technology,":[99],"top":[100,148],"management":[101,149],"support,":[102,150],"IT":[103,151],"infrastructure,":[104,152],"training,":[106,154],"legal-governmental":[107,156],"regulations,":[108],"attitude":[110,163,189],"as":[111,216,218],"potential":[112],"determinants":[113,187],"systems.":[118,176,195],"self-developed":[120],"self-administered":[122],"questionnaire":[123],"was":[124],"distributed":[125],"418":[127],"employees,":[128],"mid-level":[129],"managers,":[130],"top-level":[132],"managers":[133],"working":[134],"operating":[137],"Riyadh,":[139],"Saudi":[140,245],"Arabia.":[141,246],"The":[142,223],"found":[144],"that":[145],"regulations":[157],"have":[158],"positive":[160],"impact":[161,184],"toward":[164],"systems,":[166],"which":[167],"turn":[169],"positively":[170],"influences":[171],"Gender,":[177],"education,":[178],"occupation":[180],"significantly":[181],"moderated":[182],"some":[186],"and,":[190],"consequently,":[191],"Such":[196],"framework":[199],"offers":[200],"actionable":[201],"insights":[202],"recommendations,":[204],"including":[205],"enhancing":[206],"awareness":[209],"policies,":[215],"well":[217],"increasing":[219],"profitability":[220],"within":[221],"SMEs.":[222],"findings":[225],"make":[226],"considerable":[227],"theoretical":[228],"contributions":[229,238],"development":[232],"knowledge":[234],"deliver":[236],"practical":[237],"towards":[239],"status":[241]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-12-19T00:00:00"}