Ensuring Employees' IT Compliance: Carrot or Stick?

References

• Aiken L, West S. Multiple Regression: Testing and Interpreting Interactions (1991) (Sage, Newbury Park, CA) Google Scholar
• Ajzen I. The theory of planned behavior. Organ. Behav. Decision Processes (1991) 50(2):179–211Crossref, Google Scholar
• Ajzen I, Fishbein M. Understanding Attitudes and Predicting Behavior (1980) (Prentice Hall, Englewood Cliffs, NJ) Google Scholar
• Andreoni J, Harbaugh W, Vesterlund L. The carrot or the stick: Rewards, punishments, and cooperation. Amer. Econom. Rev. (2003) 93(3):893–902Crossref, Google Scholar
• Armstrong JS, Overton T. Estimating nonresponse bias in mail surveys. J. Marketing Res. (1976) 14(3):396–402Crossref, Google Scholar
• Arvey RD, Ivancevich JM. Punishment in organizations: A review, propositions, and research suggestions. Acad. Management Rev. (1980) 5(1):123–132Crossref, Google Scholar
• Arvey RD, Davis GA, Nelson SM. Use of discipline in an organization: A field study. J. Appl. Psych. (1984) 69(3):448–460Crossref, Google Scholar
• Bandura A. Social Learning Theory (1971) (General Learning Press, Morristown, NJ) Google Scholar
• Bass B. Leadership and Performance Beyond Expectations (1985) (Free Press, New York) Google Scholar
• Beaudry A, Pinsonneault A. Understanding user responses to information technology: A coping model of user adaptation. MIS Quart. (2005) 29(3):493–524Crossref, Google Scholar
• Boss SR, Kirsch LJ, Angermeier I, Shingler RA, Boss RW. If someone is watching, I'll do what I'm asked: Mandatoriness, control, and information security. Eur. J. Inform. Systems (2009) 18(2):151–164Crossref, Google Scholar
• Boudreau M-C, Robey D. Enacting integrated information technology: A human agency perspective. Organ. Sci. (2005) 16(1):3–18Link, Google Scholar
• Brislin R, Triandis H, Berry J. Translation and content analysis of oral and written materials. Handbook of Cross-Cultural Psychology (1980) (Allyn & Bacon, Boston) 389–444Google Scholar
• Brown SA, Massey AP, Montoya-Weiss MM, Burkman JP. Do I really have to? User acceptance of mandated technology. Eur. J. Inform. Systems (2002) 11(4):283–295Crossref, Google Scholar
• Bulgurcu BH, Cavusoglu I, Benbasat . Information security policy compliance: An empirical study of rationality-based beliefs and information security awareness. MIS Quart. (2010) 34(3):523–548Crossref, Google Scholar
• Burns JM. Leadership (1978) (Harper and Row, New York) Google Scholar
• Burton-Jones A. Minimizing method bias through programmatic research. MIS Quart. (2009) 33(3):445–471Crossref, Google Scholar
• Burton-Jones A, Gallivan MJ. Toward a deeper understanding of system usage in organizations: A multilevel perspective. MIS Quart. (2007) 31(4):657–679Crossref, Google Scholar
• Cesario J, Grant H, Higgins ET. Regulatory fit and persuation: Transfer from “feeling right”. J. Personality Soc. Psych. (2004) 86(3):388–404Crossref, Google Scholar
• Chae B, Poole MS. Mandates and technology acceptance: A tale of two enterprise technologies. J. Strategic Inform. Systems (2005) 14(2):147–166Crossref, Google Scholar
• Chin WW, Marcolin BL, Newsted PR. A partial least squares latent variable modeling approach for measuring interaction effects: Results from a Monte Carlo simulation study and an electronic mail emotion/adoption study. Inform. Systems Res. (2003) 14(2):189–217Link, Google Scholar
• Choudhury V, Sabherwal R. Portfolios of control in outsourced software development projects. Inform. Systems Res. (2003) 14(3):291–314Link, Google Scholar
• Cohen J. Statistical Power Analysis for the Behavioral Sciences (1988) 2nd ed.(Lawrence Erlbaum, Hillsdale, NJ) Google Scholar
• Cohen J, Cohen P, West S, Aiken L. Applied Multiple Regression/Correlation Analysis for the Behavioral Sciences (2003) 3rd ed.(Lawrence Erlbaum Associates, Hillsdale, NJ) Google Scholar
• D'Arcy J, Hovav A, Galletta DF. User awareness of security countermeasures and its impact on information systems misuse: A deterrence approach. Inform. Systems Res. (2009) 20(1):79–98Link, Google Scholar
• Eisenhardt KM. Control: Organizational and economic approaches. Management Sci. (1985) 31(2):134–149Link, Google Scholar
• Eisenhardt KM. Agency theory: An assessment and review. Acad. Management Rev. (1989a) 14(1):57–74Crossref, Google Scholar
• Eisenhardt KM. Control: Organizational and economic approaches. Management Sci. (1989b) 31(2):134–149Link, Google Scholar
• Fishbein M, Ajzen I. Belief, Attitude, Intention and Behavior: An Introduction to Theory and Research (1975) (Addison-Wesley, Reading, MA) Google Scholar
• Fornell C, Bookstein FL. Two structural equation models: LISREL and PLS applied to consumer exit-voice theory. J. Marketing Res. (1982) 19(4):440–452Crossref, Google Scholar
• Galletta DF, Hufnagel EM. A model of end-user computing policy. Inform. Management (1992) 22(1):1–18Crossref, Google Scholar
• Gefen D, Rigdon EE, Straub D. An update and extension to SEM guidelines for administrative and social science research. MIS Quart. (2011) 35(2):iii-xivCrossref, Google Scholar
• Gefen D, Straub D, Boudreau M-C. Structural equation modeling and regression: Guidelines for research practice. Comm. Assoc. Inform. Systems (2000) 4(1). Article 7. http://aisel.aisnet.org/cais/vol4/iss1/7Google Scholar
• Green SG, Welsh MA. Cybernetics and dependence: Reframing the control concept. Acad. Management Rev. (1988) 13(2):287–301Crossref, Google Scholar
• Guzzo RA. Types of rewards, cognitions, and work motivation. Acad. Management Rev. (1979) 4(1):75–86Crossref, Google Scholar
• Hair J, Anderson R, Tatham R, Black W. Multivariate Data Analysis (1998) 5th ed.(Prentice Hall, Englewood Cliffs, NJ) Google Scholar
• Herath T, Rao HR. Protection motivation and deterrence: A framework for security policy compliance in organizations. Eur. J. Inform. Systems (2009) 18(2):106–125Crossref, Google Scholar
• Higgins ET. Beyond pleasure and pain. Amer. Psychologist (1997) 52(12):1280–1300Crossref, Google Scholar
• Higgins ET, Zanna MP. Promotion and prevention: Regulatory focus as a motivational principle. Advances in Experimental Social Psychology (1998) (Academic Press, San Diego) 1–46Crossref, Google Scholar
• Higgins ET. Making a good decision: Value from fit. Amer. Psychologist (2000) 55(11):1217–1230Crossref, Google Scholar
• Higgins ET. Regulatory focus theory: Implications for the study of emotions at work. Organ. Behav. Human Decision Processes (2001) 86(1):35–66Crossref, Google Scholar
• Higgins ET. Value from hedonic experience and engagement. Psych. Rev. (2006) 113(3):439–460Crossref, Google Scholar
• Higgins ET, Friedman R, Harlow RE, Chen IL, Ayduk ON, Taylor A. Achievement orientations from subjective histories of success: Promotion pride versus prevention pride. Eur. J. Soc. Psych. (2001) 31:3–23Crossref, Google Scholar
• Hofstede G. The poverty of management control philosophy. Acad. Management Rev. (1978) 3:450–461Crossref, Google Scholar
• Hofstede G. Culture's Consequences (2001) 2nd ed.(Sage, Thousand Oaks, CA) Google Scholar
• Jensen MC, Meckling WH. Theory of the firm: Managerial behavior, agency costs and ownership structure. J. Financial Econom. (1976) 3(4):305–360Crossref, Google Scholar
• Johnson RE, Chang CD, Yang L. Commitment and motivation at work: The relevance of employee identity and regulatory focus. Acad. Management Rev. (2010) 35(2):226–245Crossref, Google Scholar
• Kark R, Van Dijk D. Motivation to lead, motivation to follow: The role of the self-regulatory focus in leadership processes. Acad. Management Rev. (2007) 32(2):500–528Crossref, Google Scholar
• Ke W, Wang X, Wei KK. User motivation to explore enterprise system features: An exploratory study of its organizational antecedents and consequences. ICIS 2008 Proc. (2008) Paris, France(Assoc. Inform. Systems)Google Scholar
• Kirsch LJ. The management of complex tasks in organizations: Controlling the systems development process. Organ. Sci. (1996) 7(1):1–21Link, Google Scholar
• Kirsch LJ. Portfolios of control modes and IS project management. Inform. Systems Res. (1997) 8(3):215–239Link, Google Scholar
• Kirsch LJ. Deploying common systems globally: The dynamics of control. Inform. Systems Res. (2004) 15(4):374–395Link, Google Scholar
• Kirsch LJ, Sambamurthy V, Ko D-G, Purvis RL. Controlling information systems development projects: The view from the client. Management Sci. (2002) 48(4):484–498Link, Google Scholar
• Klein HJ. An integrated control theory model of work motivation. Acad. Management Rev. (1989) 14(2):150–172Crossref, Google Scholar
• Kohli R, Kettinger WJ. Informating the clan: Controlling physicians' costs and outcomes. MIS Quart. (2004) 28(3):363–394Crossref, Google Scholar
• Komaki J, Porter LW, Steers RM. Reinforcement theory at work: Enhancing and explaining what employees do. Motivation and Work Behavior (2003) 7th ed.(Irwin/McGraw-Hill, Burr Ridge, IL) 95–113Google Scholar
• Lapointe L, Rivard S. A multilevel model of resistance to information technology implementation. MIS Quart. (2005) 29(3):461–491Crossref, Google Scholar
• Lee AY, Aaker JL, Gardner WL. The pleasures and pains of distinct self-construals: The role of interdependence in regulatory focus. J. Personality Soc. Psych. (2000) 78:1122–1134Crossref, Google Scholar
• Liang H, Xue Y. Coping with ERP-related contextual issues in SMEs: A vendor's perspective. J. Strategic Inform. Systems (2004) 13(4):399–415Crossref, Google Scholar
• Liang H, Xue Y. Avoidance of information technology threats: A theoretical perspective. MIS Quart. (2009) 33(1):71–90Crossref, Google Scholar
• Liang H, Xue Y. Understanding security behaviors in personal computer usage: A threat avoidance perspective. J. Assoc. Inform. Systems (2010) 11(7):394–413Google Scholar
• Liang H, Saraf N, Hu Q, Xue Y. Assimilation of enterprise systems: The effect of institutional pressures and the mediating role of top management. MIS Quart. (2007) 31(1):59–87Crossref, Google Scholar
• Liang H, Xue Y, Boulton WR, Byrd TA. Why western vendors don't dominate China's ERP market? Comm. ACM (2004) 47(7):69–72Crossref, Google Scholar
• Liang H, Xue Y, Ke W, Wei KK. Understanding the influence of team climate on IT use. J. Assoc. Inform. Systems (2010) 11(8):414–432Google Scholar
• Meyer JP, Becker TE, Vandenberghe C. Employee commitment and motivation: A conceptual analysis and integrative model. J. Appl. Psych. (2004) 89(6):991–1007Crossref, Google Scholar
• Myyry L, Siponen M, Pahnila S, Vartiainen T, Vance A. What levels of moral reasoning and values explain adherence to information security rules? An empirical study. Eur. J. Inform. Systems (2009) 18(2):126–139Crossref, Google Scholar
• Neubert MJ, Kacmar KM, Carlson DS, Chonko LB. Regulatory focus as a mediator of the influence of initiating structure and servant leadership on employee behavior. J. Appl. Psych. (2008) 93(6):1220–1233Crossref, Google Scholar
• Niazkhani Z, Pirnejad H, van der Sijs H, Aarts J. Evaluating the medication process in the context of CPOE use: The significance of working around the system. Internat. J. Medical Informatics (2011) 80(7):490–506Crossref, Google Scholar
• Nunnally J. Psychometric Theory (1978) 2nd ed.(McGraw-Hill, New York) Google Scholar
• O'Reilly CA, Puffer SM. The impact of rewards and punishments in a social context: A laboratory and field experiment. J. Occupational Psych. (1989) 62(1):41–53Crossref, Google Scholar
• Orlikowski WJ, Scott SV. Sociomateriality: Challenging the seperation of technology, work, and organization. Acad. Management Ann. (2008) 2(1):433–474Crossref, Google Scholar
• Ouchi WG. A conceptual framework for the design of organizational control mechanisms. Management Sci. (1979) 25(9):833–848Link, Google Scholar
• Pahnila S, Siponen M, Mahmood A. Employees' behavior towards IS security policy compliance. Proc. 40th Annual Hawaii Internat. Conf. System Sci. (2007) Waikoloa, Big Island, Hawaii(IEEE Comput. Soc., Washington, D.C.) Crossref, Google Scholar
• Podsakoff PM, Organ DW. Self-reports in organizational research: Problems and prospects. J. Management (1986) 12(4):531–544Crossref, Google Scholar
• Podsakoff PM, Bommer WH, Podsakoff NP, MacKenzie SB. Relationships between leader reward and punishment behavior and subordinate attitudes, perceptions, and behaviors: A meta-analytic review of existing and new research. Organ. Behav. Human Decision Processes (2006) 99(2):113–142Crossref, Google Scholar
• Podsakoff PM, MacKenzie SB, Lee JY, Podsakoff NP. Common method biases in behavioral research: A critical review of the literature and recommended remedies. J. Appl. Psych. (2003) 88(5):879–903Crossref, Google Scholar
• Podsakoff PM, Todor WD, Grover RA, Huber VL. Situational moderators of leader reward and punishment behavior: Fact or fiction? Organ. Behav. Human Performance (1984) 34(1):21–63Crossref, Google Scholar
• Ringle CM, Wende S, Will A. (2005) . SmartPLS, 2.0 (beta), Hamburg, Germany, http://smartpls.deGoogle Scholar
• Shah J, Higgins ET, Friedman R. Performance incentives and means: How regulatory focus influences goal attainment. J. Personality Soc. Psych. (1998) 74(2):285–293Crossref, Google Scholar
• Sheeran P. Intention-behavior relations: A conceptual and empirical review. Eur. Rev. Soc. Psych. (2002) 12(1):1–36Crossref, Google Scholar
• Sia SK, Neo BS. Reengineering effectiveness and the redesign of organizational control: A case study of the inland revenue authority in Singapore. J. Management Inform. Systems (1997) 14(1):69–92Crossref, Google Scholar
• Sia SK, Tang M, Soh C, Boh WF. Enterprise resource planning (ERP) systems as a technology of power: Empowerment or panoptic control? Database Adv. Inform. Systems (2002) 33(1):23–37Crossref, Google Scholar
• Siemsen E, Roth A, Oliveira P. Common method bias in regression models with linear, quadratic, and interaction effects. Organ. Res. Methods (2010) 13(3):456–476Crossref, Google Scholar
• Sims HP. Further thoughts on punishment in organizations. Acad. Management Rev. (1980) 5(1):133–138Crossref, Google Scholar
• Skinner BF. Science and Human Behavior (1953) (Macmillan, New York) Google Scholar
• Steers RM, Mowday RT, Shapiro DL. The future of work motivation theory. Acad. Management Rev. (2004) 29(3):379–387Crossref, Google Scholar
• Thorndike EL. Animal Intelligence (1911) (Macmillan, New York) Google Scholar
• Trevino LK. The social effects of punishment in organizations: A justice perspective. Acad. Management Rev. (1992) 17(4):647–676Crossref, Google Scholar
• Tyler TR, Blader SL. Can businesses effectively regulate employee conduct? The antecedents of rule following in work settings. Acad. Management J. (2005) 48(6):1143–1158Crossref, Google Scholar
• Venkatesh V. Determinants of perceived ease of use: Integrating control, intrinsic motivation, and emotion into the technology acceptance model. Inform. Systems Res. (2000) 11(4):342–365Link, Google Scholar
• Venkatesh V, Brown SA, Maruping LM, Bala H. Predicting different conceptualizations of system use: The competing roles of behavioral intention, facilitating conditions, and behavioral expectation. MIS Quart. (2008) 32(3):483–502Crossref, Google Scholar
• Venkatesh V, Morris MG, Davis GB, Davis FD. User acceptance of information technology: Toward a unified view. MIS Quart. (2003) 27(3):425–478Crossref, Google Scholar
• Vroom VH. Work and Motivation (1964) (Wiley, New York) Google Scholar
• Wold H, Nijkamp P, Leitner H, Wrigley N. Systems analysis by partial least squares. Measuring the Unmeasurable (1985) (Martinus Nijhoff, Dordrecht, The Netherlands) 221–251Crossref, Google Scholar
• Xue Y, Liang H, Wu L. Punishment, justice, and compliance with mandatory IT usage. Inform. Systems Res. (2011) 22(2):400–414Link, Google Scholar
• Xue Y, Liang H, Boulton W, Snyder C. ERP implementation failures in China: Case studies with implications for ERP vendors. Internat. J. Production Econom. (2005) 97(3):279–295Crossref, Google Scholar
• Zhang Y, Mittal V. The attractiveness of enriched and impoverished options: Culture, self-construal, and regulatory focus. Personality Soc. Psych. Bulletin (2007) 33(4):588–598Crossref, Google Scholar
• Zimring FE, Hawkins G. Deterrence (1973) (University of Chicago Press, Chicago) Google Scholar
• Zuboff S. In the Age of the Smart Machine: The Future of Work and Power (1988) (Basic Books, New York) Google Scholar