{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,29]],"date-time":"2026-07-29T03:54:58Z","timestamp":1785297298403,"version":"3.55.0"},"reference-count":112,"publisher":"Elsevier BV","issue":"7","license":[{"start":{"date-parts":[[2017,11,1]],"date-time":"2017-11-01T00:00:00Z","timestamp":1509494400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Information & Management"],"published-print":{"date-parts":[[2017,11]]},"DOI":"10.1016\/j.im.2017.01.003","type":"journal-article","created":{"date-parts":[[2017,1,13]],"date-time":"2017-01-13T08:02:27Z","timestamp":1484294547000},"page":"887-901","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":64,"title":["Determinants of early conformance with information security policies"],"prefix":"10.1016","volume":"54","author":[{"given":"France","family":"B\u00e9langer","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"St\u00e9phane","family":"Collignon","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kathryn","family":"Enget","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Eric","family":"Negangard","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.im.2017.01.003_bib0005","unstructured":"Berger, U. 2011-2012. CSI\/FBI Computer Crime and Security Survey, C. S. Institute (ed.)."},{"key":"10.1016\/j.im.2017.01.003_bib0010","series-title":"55% of Net Users Use the Same Password for Most, If Not All, Websites. When Will They Learn?","author":"Cluley","year":"2013"},{"key":"10.1016\/j.im.2017.01.003_bib0015","series-title":"2015 Trustwave Global Security Report","author":"Trustwave","year":"2015"},{"issue":"September (3)","key":"10.1016\/j.im.2017.01.003_bib0020","doi-asserted-by":"crossref","first-page":"613","DOI":"10.2307\/25750694","article-title":"Practicing safe computing: a multimethod empirical examination of home computer user security behavioral intentions","volume":"34","author":"Anderson","year":"2010","journal-title":"MIS Q."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0025","doi-asserted-by":"crossref","first-page":"203","DOI":"10.2753\/MIS0742-1222280208","article-title":"Understanding nonmalicious security violations in the workplace: a composite behavior model","volume":"28","author":"Guo","year":"2011","journal-title":"J. Manage. Inf. Syst."},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0030","doi-asserted-by":"crossref","first-page":"1","DOI":"10.25300\/MISQ\/2013\/37.1.01","article-title":"Beyond deterrence: an expanded view of employee computer abuse","volume":"37","author":"Willison","year":"2013","journal-title":"Mis Q."},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0035","doi-asserted-by":"crossref","first-page":"283","DOI":"10.1057\/palgrave.ejis.3000438","article-title":"Do I really have to? User acceptance of mandated technology","volume":"11","author":"Brown","year":"2002","journal-title":"Eur. J. Inf. Syst."},{"key":"10.1016\/j.im.2017.01.003_bib0040","first-page":"214","article-title":"Understanding insider threat: a framework for characterising attacks","author":"Nurse","year":"2014","journal-title":"IEEE Secur. Privacy Workshops"},{"issue":"September (2)","key":"10.1016\/j.im.2017.01.003_bib0045","first-page":"51","article-title":"Toward a biometric security layer in accounting systems","volume":"17","author":"Chandra","year":"2003","journal-title":"J. Inf. Syst."},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0050","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1109\/MSP.2011.150","article-title":"A research agenda acknowledging the persistence of passwords","volume":"10","author":"Herley","year":"2012","journal-title":"IEEE Secur. Privacy"},{"key":"10.1016\/j.im.2017.01.003_bib0055","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1080\/15536548.2014.924812","article-title":"Factors for measuring password-based authentication practices","volume":"10","author":"Mattord","year":"2014","journal-title":"J. Inf. Privacy Secur."},{"issue":"July (7)","key":"10.1016\/j.im.2017.01.003_bib0060","doi-asserted-by":"crossref","first-page":"78","DOI":"10.1145\/2699390","article-title":"Passwords and the evolution of imperfect authentication","volume":"58","author":"Bonneau","year":"2015","journal-title":"Commun. ACM"},{"key":"10.1016\/j.im.2017.01.003_bib0065","series-title":"Proceedings of the winter international synposium on Information and communication technologies","first-page":"1","article-title":"Password policy: the good, the bad, and the ugly","author":"Summers","year":"2004"},{"key":"10.1016\/j.im.2017.01.003_bib0070","doi-asserted-by":"crossref","first-page":"10","DOI":"10.1016\/S1361-3723(11)70123-3","article-title":"Assessing password guidance and enforcement on leading websites","author":"Furnell","year":"2011","journal-title":"Comput. Fraud Secur."},{"key":"10.1016\/j.im.2017.01.003_bib0075","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1016\/S1361-3723(14)70555-X","article-title":"Password practices on leading websites \u2013 revisited","author":"Furnell","year":"2014","journal-title":"Comput. Fraud Secur."},{"key":"10.1016\/j.im.2017.01.003_bib0080","series-title":"BBC","article-title":"Has the flawed password system finally had its day?","author":"Rubens","year":"2014"},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0085","doi-asserted-by":"crossref","first-page":"90","DOI":"10.1016\/j.cose.2012.09.010","article-title":"Future Directions for Behavioral Information Security Research","volume":"32","author":"Crossler","year":"2013","journal-title":"Comput. Secur."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0090","doi-asserted-by":"crossref","first-page":"431","DOI":"10.2307\/25750685","article-title":"Moving toward black hat research in information systems security: an editorial introduction to the special issue","volume":"34","author":"Mahmood","year":"2010","journal-title":"Mis Q."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0095","doi-asserted-by":"crossref","first-page":"625","DOI":"10.3102\/0034654308325896","article-title":"Understanding technology adoption: theory and future directions for informal learning","volume":"79","author":"Straub","year":"2009","journal-title":"Rev. Educ. Res."},{"key":"10.1016\/j.im.2017.01.003_bib0100","doi-asserted-by":"crossref","first-page":"177","DOI":"10.1016\/j.cose.2015.01.002","article-title":"Personality, attitudes, and intentions: Predicting initial adoption of information security behavior","volume":"49","author":"Shropshire","year":"2015","journal-title":"Comput. Secur."},{"key":"10.1016\/j.im.2017.01.003_bib0105","series-title":"Accounting information systems","author":"Gelinas","year":"2015"},{"issue":"6","key":"10.1016\/j.im.2017.01.003_bib0110","doi-asserted-by":"crossref","first-page":"707","DOI":"10.1016\/j.im.2003.08.008","article-title":"An integrative model of computer abuse based on social control and general deterrence theories","volume":"41","author":"Lee","year":"2004","journal-title":"Inf. Manage."},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0115","doi-asserted-by":"crossref","first-page":"255","DOI":"10.1287\/isre.1.3.255","article-title":"Effective IS security: an empirical study","volume":"3","author":"Straub","year":"1990","journal-title":"Inf. Syst. Res."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0120","doi-asserted-by":"crossref","first-page":"157","DOI":"10.2753\/MIS0742-1222290305","article-title":"Organizations\u2019 information security policy compliance: stick or carrot approach?","volume":"29","author":"Chen","year":"2012","journal-title":"J. Manage. Inf. Syst."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0125","doi-asserted-by":"crossref","first-page":"192","DOI":"10.1287\/isre.2.3.192","article-title":"Development of an instrument to measure the perceptions of adopting an information technology innovation","volume":"2","author":"Moore","year":"1991","journal-title":"Inf. Syst. Res."},{"issue":"7","key":"10.1016\/j.im.2017.01.003_bib0130","first-page":"445","article-title":"Six design theories for IS security policies and guidelines","volume":"7","author":"Siponen","year":"2006","journal-title":"J. Assoc. Inf. Syst."},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0135","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1080\/15536548.2010.10855899","article-title":"Passwords: do user preferences and website protocols differ from theory?","volume":"6","author":"Barra","year":"2010","journal-title":"J. Inf. Privacy Secur."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0140","doi-asserted-by":"crossref","first-page":"41","DOI":"10.4018\/joeuc.2004070103","article-title":"Introducing the check-off password system (COPS): An advancement in user authentication methods and information security","volume":"16","author":"Warkentin","year":"2004","journal-title":"J. Organ. End User Comput."},{"issue":"November (6)","key":"10.1016\/j.im.2017.01.003_bib0145","doi-asserted-by":"crossref","first-page":"321","DOI":"10.1007\/s10207-011-0147-0","article-title":"Token-based graphical password authentication","volume":"10","author":"Gyorffy","year":"2011","journal-title":"Int. J. Inf. Secur."},{"issue":"7","key":"10.1016\/j.im.2017.01.003_bib0150","doi-asserted-by":"crossref","first-page":"587","DOI":"10.1016\/0167-4048(89)90051-5","article-title":"A Survey of Password Mechanisms: Weaknesses and Potential Improvements. Part 2","volume":"8","author":"Jobusch","year":"1989","journal-title":"Comput. Secur."},{"key":"10.1016\/j.im.2017.01.003_bib0155","unstructured":"Infosecurity_Magazine 2016. Password Misuse is Rampant at US Businesses."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0160","doi-asserted-by":"crossref","first-page":"139","DOI":"10.1016\/S0268-4012(02)00105-6","article-title":"An integrative study of information systems security effectiveness","volume":"23","author":"Kankanhalli","year":"2003","journal-title":"Int. J. Inf. Manage."},{"key":"10.1016\/j.im.2017.01.003_bib0165","series-title":"The True Cost of Unusable Password Policies Password Use in the Wild, Computer Human Interaction, Atlanta, Georgia","first-page":"383","author":"Inglesant","year":"2010"},{"key":"10.1016\/j.im.2017.01.003_bib0170","first-page":"67","article-title":"Evaluation of the human impact of password authentication practices on information security","volume":"7","author":"Carstens","year":"2004","journal-title":"Inf. Sci. J."},{"key":"10.1016\/j.im.2017.01.003_bib0175","series-title":"Diffusion of Innovations","author":"Rogers","year":"1995"},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0180","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1016\/0749-5978(91)90020-T","article-title":"The theory of planned behavior","volume":"50","author":"Ajzen","year":"1991","journal-title":"Organ. Behav. Hum. Decis. Process."},{"key":"10.1016\/j.im.2017.01.003_bib0185","article-title":"The Theory of Planned Behavior","volume":"1","author":"Ajzen","year":"2012"},{"key":"10.1016\/j.im.2017.01.003_bib0190","series-title":"Understanding Attitudes and Predicting Social Behavior","author":"Ajzen","year":"1980"},{"issue":"January (1)","key":"10.1016\/j.im.2017.01.003_bib0195","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1111\/j.1365-2575.2012.00420.x","article-title":"Security services as coping mechanisms: an investigation into user intention to adopt an email authentication service","volume":"24","author":"Herath","year":"2014","journal-title":"Inf. Syst. J."},{"issue":"September (3)","key":"10.1016\/j.im.2017.01.003_bib0200","doi-asserted-by":"crossref","first-page":"523","DOI":"10.2307\/25750690","article-title":"Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness","volume":"34","author":"Bulgurcu","year":"2010","journal-title":"Mis Q."},{"key":"10.1016\/j.im.2017.01.003_bib0205","doi-asserted-by":"crossref","first-page":"106","DOI":"10.1057\/ejis.2009.6","article-title":"Protection motivation and deterrence: a framework for security policy compliance in organisations","volume":"18","author":"Herath","year":"2009","journal-title":"Eur. J. Inf. Syst."},{"key":"10.1016\/j.im.2017.01.003_bib0210","series-title":"Belief, Attitude, Intention and Behavior: An Introduction to Theory and Research","author":"Fishbein","year":"1975"},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0215","doi-asserted-by":"crossref","first-page":"425","DOI":"10.2307\/30036540","article-title":"User acceptance of information technology: toward a unified view","volume":"27","author":"Venkatesh","year":"2003","journal-title":"MIS Q."},{"issue":"6","key":"10.1016\/j.im.2017.01.003_bib0220","doi-asserted-by":"crossref","first-page":"443","DOI":"10.1080\/00207590802644774","article-title":"Individual attitudes and perceived social norms: Reports on HIV\/AIDS-related stigma among service providers in China","volume":"44","author":"Li","year":"2009","journal-title":"Int. J. Psychol."},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0225","doi-asserted-by":"crossref","first-page":"329","DOI":"10.1207\/s15327663jcp0404_02","article-title":"Consumer innovativeness and the adoption process","volume":"4","author":"Manning","year":"1995","journal-title":"J. Consum. Psychol."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0230","doi-asserted-by":"crossref","first-page":"192","DOI":"10.1002\/bse.690","article-title":"Consumer eco\u2010innovation adoption: assessing attitudinal factors and perceived product characteristics","volume":"20","author":"Jansson","year":"2011","journal-title":"Bus. Strategy Environ."},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0235","doi-asserted-by":"crossref","first-page":"51","DOI":"10.1002\/cb.346","article-title":"Exploring consumer adoption of a high involvement eco-innovation using value-belief-norm theory","volume":"10","author":"Jansson","year":"2011","journal-title":"J. Consum. Behav."},{"key":"10.1016\/j.im.2017.01.003_bib0240","doi-asserted-by":"crossref","first-page":"146","DOI":"10.1016\/j.tra.2015.04.017","article-title":"Why early adopters engage in interpersonal diffusion of technological innovations: An empirical study on electric bicycles and electric scooters","volume":"78","author":"Seebauer","year":"2015","journal-title":"Transp. Res. Part A Policy Pract."},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0245","doi-asserted-by":"crossref","first-page":"463","DOI":"10.1177\/1096348004267515","article-title":"Theory of planned behavior: Potential travelers from China","volume":"28","author":"Lam","year":"2004","journal-title":"J. Hosp. Tourism Res."},{"key":"10.1016\/j.im.2017.01.003_bib0250","doi-asserted-by":"crossref","first-page":"79","DOI":"10.1287\/isre.1070.0160","article-title":"User awareness of security countermeasures and its impact on information systems misuse: a deterrence approach","volume":"20","author":"D'Arcy","year":"2009","journal-title":"Inf. Syst. Res."},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0255","doi-asserted-by":"crossref","first-page":"83","DOI":"10.1016\/j.cose.2011.10.007","article-title":"Understanding information systems security policy compliance: an integration of the theory of planned behavior and the protection motivation theory","volume":"31","author":"Ifinedo","year":"2012","journal-title":"Comput. Secur."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0260","doi-asserted-by":"crossref","first-page":"548","DOI":"10.2307\/25750691","article-title":"Fear appeals and information security behaviors: An empirical study","volume":"34","author":"Johnston","year":"2010","journal-title":"MIS Q."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0265","doi-asserted-by":"crossref","first-page":"361","DOI":"10.1016\/j.dss.2010.07.009","article-title":"Understanding anti-plagiarism software adoption: an extended protection motivation theory perspective","volume":"50","author":"Lee","year":"2011","journal-title":"Decis. Support Syst."},{"issue":"7","key":"10.1016\/j.im.2017.01.003_bib0270","first-page":"394","article-title":"Understanding security behaviors in personal computer usage: A threat avoidance perspective","volume":"11","author":"Liang","year":"2010","journal-title":"J. Assoc. Inf. Syst."},{"issue":"6","key":"10.1016\/j.im.2017.01.003_bib0275","doi-asserted-by":"crossref","first-page":"2799","DOI":"10.1016\/j.chb.2008.04.005","article-title":"Security lapses and the omission of information security measures: A threat control model and empirical test","volume":"24","author":"Workman","year":"2008","journal-title":"Comput. Hum. Behav."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0280","doi-asserted-by":"crossref","first-page":"449","DOI":"10.1111\/j.1745-6606.2009.01148.x","article-title":"Toward an understanding of the online consumer's risky behavior and protection practices","volume":"43","author":"Milne","year":"2009","journal-title":"J. Consum. Affairs"},{"key":"10.1016\/j.im.2017.01.003_bib0285","first-page":"367","article-title":"A Protection Motivation Theory Approach to Home Wireless Security","author":"Woon","year":"2005","journal-title":"Twenty-Sixth International Conference on Information Systems (ICIS)"},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0290","doi-asserted-by":"crossref","first-page":"177","DOI":"10.1057\/ejis.2009.11","article-title":"Threat or coping appraisal: determinants of SMB executives' decision to adopt anti-malware software","volume":"18","author":"Lee","year":"2009","journal-title":"Eur. J. Inf. Syst."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0295","doi-asserted-by":"crossref","first-page":"407","DOI":"10.1111\/j.1559-1816.2000.tb02323.x","article-title":"A meta-analysis of research on protection motivation theory","volume":"30","author":"Floyd","year":"2000","journal-title":"J. Appl. Soc. Psychol."},{"issue":"5","key":"10.1016\/j.im.2017.01.003_bib0300","doi-asserted-by":"crossref","first-page":"469","DOI":"10.1016\/0022-1031(83)90023-9","article-title":"Protection motivation and self-efficacy: a revised theory of fear appeals and attitude change","volume":"19","author":"Maddux","year":"1983","journal-title":"J. Exp. Soc. Psychol."},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0305","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1080\/00223980.1975.9915803","article-title":"A protection motivation theory of fear appeals and attitude change","volume":"91","author":"Rogers","year":"1975","journal-title":"J. Psychology: Interdiscip. Appl."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0310","doi-asserted-by":"crossref","first-page":"153","DOI":"10.1016\/j.jsis.2007.05.004","article-title":"The role of external and internal influences on information systems security \u2013 a neo-institutional perspective","volume":"16","author":"Hu","year":"2007","journal-title":"J. Strategic Inf. Syst."},{"issue":"7","key":"10.1016\/j.im.2017.01.003_bib0315","first-page":"386","article-title":"The centrality of awareness in the formation of user behavioral intention toward protective information technologies","volume":"8","author":"Dinev","year":"2007","journal-title":"J. Assoc. Inf. Syst."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0320","doi-asserted-by":"crossref","first-page":"461","DOI":"10.2307\/25148692","article-title":"A multilevel model of resistance to information technology implementation","volume":"29","author":"Lapointe","year":"2005","journal-title":"MIS Q."},{"issue":"8","key":"10.1016\/j.im.2017.01.003_bib0325","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1145\/1076211.1076241","article-title":"Is spyware an Internet nuisance or public menace?","volume":"48","author":"Hu","year":"2005","journal-title":"Commun. ACM"},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0330","doi-asserted-by":"crossref","first-page":"441","DOI":"10.2307\/249551","article-title":"Coping with systems risk: Security planning models for management decision making","volume":"22","author":"Straub","year":"1998","journal-title":"MIS Q."},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0335","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1016\/0378-7206(91)90024-V","article-title":"Security concerns of system users: a study of perceptions of the adequacy of security","volume":"20","author":"Goodhue","year":"1991","journal-title":"Inf. Manage."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0340","first-page":"11","article-title":"Impacts of comprehensive information security programs on information security culture","volume":"55","author":"Chen","year":"2015","journal-title":"J. Comput. Inf. Syst."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0345","first-page":"3","article-title":"The effects of security education training and awareness programs and individual characteristics on end user security tool usage","volume":"5","author":"Crossler","year":"2009","journal-title":"J. Inf. Syst. Secur."},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0350","doi-asserted-by":"crossref","first-page":"171","DOI":"10.1108\/09685229910292664","article-title":"Managing and controlling computer misuse","volume":"7","author":"Dhillon","year":"1999","journal-title":"Inf. Manage. Comput. Secur."},{"issue":"6","key":"10.1016\/j.im.2017.01.003_bib0355","first-page":"14","article-title":"Designing a security awareness program: Part 1","volume":"9","author":"Hansche","year":"2001","journal-title":"Inf. Syst. Secur."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0360","doi-asserted-by":"crossref","first-page":"147","DOI":"10.2307\/248922","article-title":"Validating instruments in MIS research","volume":"13","author":"Straub","year":"1989","journal-title":"MIS Q."},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0365","doi-asserted-by":"crossref","first-page":"867","DOI":"10.1016\/j.jesp.2009.03.009","article-title":"Instructional manipulation checks: detecting satisficing to increase statistical power","volume":"45","author":"Oppenheimer","year":"2009","journal-title":"J. Exp. Soc. Psychol."},{"key":"10.1016\/j.im.2017.01.003_bib0370","series-title":"SmartPLS, Release: 2.0 (beta)","author":"Ringle","year":"2005"},{"issue":"June (2)","key":"10.1016\/j.im.2017.01.003_bib0375","doi-asserted-by":"crossref","first-page":"189","DOI":"10.1287\/isre.14.2.189.16018","article-title":"A partial least squares latent variable modeling approach for measuring interaction effects: results from a monte carlo simulation study and an electronic-mail emotion\/adoption study","volume":"14","author":"Chin","year":"2003","journal-title":"Inf. Syst. Res."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0380","doi-asserted-by":"crossref","DOI":"10.2307\/23044042","article-title":"An update and extension to SEM guidelines for admnistrative and social science research","volume":"35","author":"Gefen","year":"2011","journal-title":"MIS Q."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0385","doi-asserted-by":"crossref","first-page":"123","DOI":"10.1109\/TPC.2014.2312452","article-title":"Partial least squares (PSL) structural equation modeling (SEM) for building and testing behavioral causal theory: when to choose it and how to use it","volume":"57","author":"Lowry","year":"2014","journal-title":"IEEE Trans. Prof. Commun."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0390","doi-asserted-by":"crossref","first-page":"411","DOI":"10.1037\/0033-2909.103.3.411","article-title":"Structural equation modeling in practice: a review and recommended two-step approach","volume":"103","author":"Anderson","year":"1988","journal-title":"Psychol. Bull."},{"key":"10.1016\/j.im.2017.01.003_bib0395","doi-asserted-by":"crossref","first-page":"440","DOI":"10.2307\/3151718","article-title":"Two strucutral equation models: LISREL and PLS applied to consumer exit-voice theory","volume":"19","author":"Fornell","year":"1982","journal-title":"J. Marketing Res."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0400","doi-asserted-by":"crossref","first-page":"148","DOI":"10.1037\/0021-9010.75.2.148","article-title":"Analysis of role conflict and role ambiguity in a structural equations framework","volume":"75","author":"Netemeyer","year":"1990","journal-title":"J. Appl. Psychol."},{"key":"10.1016\/j.im.2017.01.003_bib0405","series-title":"Psychometric Theory","author":"Nunnally","year":"1978"},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0410","first-page":"285","article-title":"The partial least squares approach to causal modeling, personal computer adoption and use as an illustration","volume":"2","author":"Barclay","year":"1995","journal-title":"Technol. Stud."},{"issue":"5","key":"10.1016\/j.im.2017.01.003_bib0415","doi-asserted-by":"crossref","first-page":"879","DOI":"10.1037\/0021-9010.88.5.879","article-title":"Common method biases in behavioral research: a critical review of the literature and recommended remedies","volume":"88","author":"Podsakoff","year":"2003","journal-title":"J. Appl. Psychol."},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0420","first-page":"531","article-title":"Self-reports in organizational research: problems and prospects","volume":"12","author":"Podsakoff","year":"1986","journal-title":"J. Manage."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0425","doi-asserted-by":"crossref","first-page":"445","DOI":"10.2307\/20650304","article-title":"Minimizing method bias through programmatic research","volume":"33","author":"Burton-Jones","year":"2009","journal-title":"MIS Q."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0430","doi-asserted-by":"crossref","first-page":"421","DOI":"10.2307\/2393203","article-title":"Assessing construct validity in organizational research","volume":"36","author":"Bagozzi","year":"1991","journal-title":"Administrative Sci. Q."},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0435","doi-asserted-by":"crossref","first-page":"105","DOI":"10.2307\/25148783","article-title":"Understanding And Mitigating Uncertainty In Online Exchange Relationships: A Principal-Agent Perspective","volume":"31","author":"Pavlou","year":"2007","journal-title":"MIS Q."},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0440","doi-asserted-by":"crossref","first-page":"114","DOI":"10.1037\/0021-9010.86.1.114","article-title":"Accounting for Common Method Variance in Cross-Sectional Research Designs","volume":"86","author":"Lindell","year":"2001","journal-title":"J. Appl. Psychol."},{"issue":"12","key":"10.1016\/j.im.2017.01.003_bib0445","doi-asserted-by":"crossref","first-page":"1865","DOI":"10.1287\/mnsc.1060.0597","article-title":"Common method variance in is research: a comparison of alternative approaches and a reanalysis of past research","volume":"52","author":"Malhotra","year":"2006","journal-title":"Manage. Sci."},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0450","first-page":"244","article-title":"The Legacy of the Technology Acceptance Model and a Proposal for a Paradigm Shift","volume":"8","author":"Bagozzi","year":"2007","journal-title":"J. Assoc. Inf. Syst."},{"key":"10.1016\/j.im.2017.01.003_bib0455","series-title":"ECIS 2001 Proceedings","first-page":"274","article-title":"Intention does not always matter: the contingent role of habit on IT usage behavior","author":"Limayem","year":"2001"},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0460","doi-asserted-by":"crossref","first-page":"263","DOI":"10.2753\/MIS0742-1222290410","article-title":"Using accountability to reduce access policy violations in information systems","volume":"29","author":"Vance","year":"2013","journal-title":"J. Manage. Inf. Syst."},{"issue":"7","key":"10.1016\/j.im.2017.01.003_bib0465","doi-asserted-by":"crossref","first-page":"296","DOI":"10.1016\/j.im.2011.07.002","article-title":"Out of fear or desire? Toward a better understanding of employees\u2019 motivation to follow IS security policies","volume":"48","author":"Son","year":"2011","journal-title":"Inf. Manage."},{"key":"10.1016\/j.im.2017.01.003_bib0470","series-title":"International Conference on Information Systems","first-page":"103","article-title":"The last line of defense: motivating employees to follow corporate security guidelines","author":"Kirsch","year":"2007"},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0475","doi-asserted-by":"crossref","first-page":"417","DOI":"10.1111\/j.1745-9125.2010.00191.x","article-title":"Deterrence and Deterrability","volume":"48","author":"Jacobs","year":"2010","journal-title":"Criminology"},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0480","doi-asserted-by":"crossref","first-page":"385","DOI":"10.1111\/j.1540-5915.1994.tb01849.x","article-title":"How believing in ourselves increases risk taking: perceived self-efficacy and opportunity recognition","volume":"25","author":"Krueger","year":"1994","journal-title":"Decis. Sci."},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0485","doi-asserted-by":"crossref","first-page":"183","DOI":"10.5465\/amr.1992.4279530","article-title":"Self-efficacy: a theoretical analysis of its determinants and malleability","volume":"17","author":"Gist","year":"1992","journal-title":"Acad. Manage. Rev."},{"issue":"9","key":"10.1016\/j.im.2017.01.003_bib0490","first-page":"544","article-title":"Clarifying the Use of Formative Measurement in the IS Discipline: The Case of Computer Self-Efficacy","volume":"9","author":"Hardin","year":"2008","journal-title":"J. Assoc. Inf. Syst."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0495","doi-asserted-by":"crossref","first-page":"403","DOI":"10.1037\/0033-295X.110.3.403","article-title":"Temporal construal","volume":"110","author":"Trope","year":"2003","journal-title":"Psychol. Rev."},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0500","doi-asserted-by":"crossref","first-page":"233","DOI":"10.1080\/01449290903121386","article-title":"The psychology of password management: a tradeoff between security and convenience","volume":"29","author":"Tam","year":"2010","journal-title":"Behav. Inf. Technol."},{"key":"10.1016\/j.im.2017.01.003_bib0505","first-page":"47","article-title":"The compliance budget managing security behaviour in organisations","author":"Beautement","year":"2009","journal-title":"Proceedings of the 2008 workshop on New security paradigms, ACM"},{"issue":"3","key":"10.1016\/j.im.2017.01.003_bib0510","first-page":"424","article-title":"Network externalities, competition, and compatibility","volume":"75","author":"Katz","year":"1985","journal-title":"Am. Econ.Rev."},{"issue":"8","key":"10.1016\/j.im.2017.01.003_bib0515","first-page":"518","article-title":"Toward a new meta-theory for designing information systems (IS) security training approaches","volume":"12","author":"Karjalainen","year":"2011","journal-title":"J. Assoc.Inf. Syst."},{"key":"10.1016\/j.im.2017.01.003_bib0520","first-page":"983","article-title":"Password strength: An empirical analysis","author":"Dell'Amico","year":"2010","journal-title":"INFOCOM 2010 Proceedings, IEEE"},{"issue":"4","key":"10.1016\/j.im.2017.01.003_bib0525","doi-asserted-by":"crossref","first-page":"431","DOI":"10.1057\/ejis.2014.19","article-title":"Quitting the use of a habituated hedonic information system: a theoretical model and empirical examination of Facebook users","volume":"24","author":"Turel","year":"2015","journal-title":"Eur. J. Inf. Syst."},{"issue":"1","key":"10.1016\/j.im.2017.01.003_bib0530","first-page":"33","article-title":"Extrinsic versus intrinsic motivation in continued twitter usage","volume":"53","author":"Agrifoglio","year":"2012","journal-title":"J. Comput. Inf. Syst."},{"key":"10.1016\/j.im.2017.01.003_bib0535","first-page":"1528","article-title":"The affect of familiarity on the usability of recognition-based graphical passwords: cross cultural study between Saudi Arabia and the United Kingdom","author":"Aljahdali","year":"2013","journal-title":"12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications"},{"issue":"2","key":"10.1016\/j.im.2017.01.003_bib0540","doi-asserted-by":"crossref","first-page":"196","DOI":"10.1016\/j.cose.2009.09.002","article-title":"A framework and assessment instrument for information security culture","volume":"29","author":"Da Veiga","year":"2010","journal-title":"Comput. Secur."},{"key":"10.1016\/j.im.2017.01.003_bib0545","series-title":"Information Security Culture, in Security in the Information Society: Visions and Perspectives","first-page":"191","author":"Schlienger","year":"2002"},{"key":"10.1016\/j.im.2017.01.003_bib0550","series-title":"Mobile Information Privacy Protection Practices (MIP3), in IFIP WG8.11\/11.13","author":"Crossler","year":"2013"},{"key":"10.1016\/j.im.2017.01.003_bib0555","doi-asserted-by":"crossref","first-page":"167","DOI":"10.2307\/249477","article-title":"Information privacy: Measuring individuals' concerns about organizational practices","volume":"20","author":"Smith","year":"1996","journal-title":"MIS Q."},{"key":"10.1016\/j.im.2017.01.003_bib0560","series-title":"Thirty Third International Conference on Information Systems (ICIS)","article-title":"Measuring Mobile Users' Concerns for Information Privacy","author":"Xu","year":"2012"}],"container-title":["Information & Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0378720617300113?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0378720617300113?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2018,9,6]],"date-time":"2018-09-06T19:53:07Z","timestamp":1536263587000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0378720617300113"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,11]]},"references-count":112,"journal-issue":{"issue":"7","published-print":{"date-parts":[[2017,11]]}},"alternative-id":["S0378720617300113"],"URL":"https:\/\/doi.org\/10.1016\/j.im.2017.01.003","relation":{},"ISSN":["0378-7206"],"issn-type":[{"value":"0378-7206","type":"print"}],"subject":[],"published":{"date-parts":[[2017,11]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Determinants of early conformance with information security policies","name":"articletitle","label":"Article Title"},{"value":"Information & Management","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.im.2017.01.003","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2017 Elsevier B.V. All rights reserved.","name":"copyright","label":"Copyright"}]}}