Toward a Theory of Information Systems Security Behaviors of Organizational Employees: A Dialectical Process Perspective

Mari Karjalainen
Corresponding Author
Mari Karjalainen
http://orcid.org/0000-0002-9534-0133
M3S Research Unit, Faculty of Information Technology and Electrical Engineering, University of Oulu, FI-90014 Oulu, Finland;
Search for more papers by this author
,
Suprateek Sarker
Suprateek Sarker
McIntire School of Commerce, University of Virginia, Charlottesville, Virginia 22904;
Search for more papers by this author
,
Mikko Siponen
Mikko Siponen
http://orcid.org/0000-0001-7041-1313
Faculty of Information Technology, FI-40014 University of Jyväskylä, Finland
Search for more papers by this author

Corresponding Author

Mari Karjalainen

M3S Research Unit, Faculty of Information Technology and Electrical Engineering, University of Oulu, FI-90014 Oulu, Finland;

Search for more papers by this author

Suprateek Sarker

McIntire School of Commerce, University of Virginia, Charlottesville, Virginia 22904;

Search for more papers by this author

Mikko Siponen

http://orcid.org/0000-0001-7041-1313

Faculty of Information Technology, FI-40014 University of Jyväskylä, Finland

Search for more papers by this author

Published Online:5 Jun 2019https://doi.org/10.1287/isre.2018.0827

Supplemental Material

isre.2018.0827.sm1.pdf

Cited by
- Ethical implications of using AI for knowledge creation: a dialectic view from a meta-synthesis approach
  24 February 2026 | Journal of Information, Communication and Ethics in Society, Vol. 50
- Clashing Climates: How (In)Congruence Between Information Security Climate and Other Organizational Climates Affects Security Policy Compliance
  20 October 2025 | MIS Quarterly, Vol. 44
- Strange Dance Partners: Supply Chain Cyberattacks and Chained Vulnerability
  6 May 2025 | Journal of Operations Management, Vol. 71, No. 6
- From human-machine collaboration to deviation: Understanding the catastrophe and resilience mechanisms of human-machine behaviors in intelligent environments
  Computers in Human Behavior, Vol. 167
- RETRACTED ARTICLE: Fostering Knowledge Exchange in Digital Communities: Psychological Determinants of Sharing in Q&A Platforms
  25 April 2024 | Journal of the Knowledge Economy, Vol. 16, No. 1
- Reconsidering neutralization techniques in behavioral cybersecurity as cybersecurity hygiene discounting
  Computers & Security, Vol. 150
- Rethinking Gamification Failure: A Model and Investigation of Gamified System Maladaptive Behaviors
  Shih-Lun “Allen” Tseng; ,
  Heshan Sun; ,
  Radhika Santhanam; ,
  Shuya Lu; ,
  Jason B. Thatcher
  19 December 2023 | Information Systems Research, Vol. 35, No. 4
- Exploring Contrasting Effects of Trust in Organizational Security Practices and Protective Structures on Employees’ Security-Related Precaution Taking
  Malte Greulich; ,
  Sebastian Lins; ,
  Daniel Pienta; ,
  Jason Bennett Thatcher; ; ,
  Ali Sunyaev;
  8 January 2024 | Information Systems Research, Vol. 35, No. 4
- United We Stand, Divided We Fall: An Autogenic Perspective on Empowering Cybersecurity in Organizations
  1 December 2024 | MIS Quarterly, Vol. 48, No. 4
- A qualitative simulation checking approach of programmed grounded theory and its application in workers’ involvement: extending Corbin and Struss’ grounded theory checking mechanism
  29 April 2024 | Quality & Quantity, Vol. 58, No. 5
- Incorrect compliance and correct noncompliance with information security policies: A framework of rule-related information security behaviour
  Computers & Security, Vol. 145
- What goes around comes around: an in-depth analysis of how respondents interpret ISP non-/compliance questionnaire items
  26 April 2024 | Information & Computer Security, Vol. 32, No. 4
- Understanding employees' responses to information security management practices: a person-environment fit perspective
  19 October 2023 | Behaviour & Information Technology, Vol. 43, No. 12
- Ontology-Based Intelligent Interface Personalization for Protection Against Phishing Attacks
  Fatemeh Mariam Zahedi,
  Yan Chen,
  Huimin Zhao
  11 October 2023 | Information Systems Research, Vol. 35, No. 3
- Cyberbullying perpetration on social media: A situational action perspective
  Information & Management, Vol. 61, No. 6
- Information Security Research in the Information Systems Discipline: A Thematic Review and Future Research Directions
  31 July 2024 | ACM SIGMIS Database: the DATABASE for Advances in Information Systems, Vol. 55, No. 3
- Application of computer information management system in universities in the information age
  Journal of Computational Methods in Sciences and Engineering, Vol. 24, No. 3
- Personal and Contextual Predictors of Information Security Policy Compliance: Evidence from a Low-Fidelity Simulation
  16 March 2023 | Journal of Business and Psychology, Vol. 39, No. 3
- Understanding Shadow IT usage intention: a view of the dual-factor model
  25 September 2023 | Online Information Review, Vol. 48, No. 3
- Exploring the Role of Team Security Climate in the Implementation of Security by Design: A Case Study in the Defense Sector
  IEEE Transactions on Software Engineering, Vol. 50, No. 5
- Toward a Process-Based, Interpretive Understanding of How Collaborative Groups Deal With ICT Interruptions
  1 March 2024 | MIS Quarterly, Vol. 48, No. 1
- iRepair or I Repair? A Dialectical Process Analysis of Control Enactment in the iPhone Repair Aftermarket
  1 March 2024 | MIS Quarterly, Vol. 48, No. 1
- Time Will Tell: The Case for an Idiographic Approach to Behavioral Cybersecurity Research
  1 March 2024 | MIS Quarterly, Vol. 48, No. 1
- A systematic analysis of failures in protecting personal health data: A scoping review
  International Journal of Information Management, Vol. 74
- Bad Employees: Examining Deviant Security Behaviors
  16 February 2023 | Journal of Computer Information Systems, Vol. 64, No. 1
- Encoded Native Names for Stronger Password
  23 February 2024
- Identifying the idiosyncrasies of behavioral information security discourse and proposing future research directions: A Foucauldian perspective
  8 June 2023 | Journal of Information Technology, Vol. 38, No. 4
- The influence of familiarity with Information Technology on the effects of deterrence
  23 November 2022 | Current Psychology, Vol. 42, No. 33
- ‘What a waste of time’: An examination of cybersecurity legitimacy
  19 July 2023 | Information Systems Journal, Vol. 33, No. 6
- German SMEs and “Home Office”: Narrative-Driven Game-Based Awareness Raising with Long-Term Efficacy
  30 October 2023
- Examining the Differential Effectiveness of Fear Appeals in Information Security Management Using Two-Stage Meta-Analysis
  11 December 2023 | Journal of Management Information Systems, Vol. 40, No. 4
- The Role of Artificial Intelligence in Cyber Security
- Digital Transformation Security Challenges
  7 September 2022 | Journal of Computer Information Systems, Vol. 63, No. 4
- The Janus Effect of Generative AI: Charting the Path for Responsible Conduct of Scholarly Activities in Information Systems
  Anjana Susarla,
  Ram Gopal,
  Jason Bennett Thatcher,
  Suprateek Sarker
  26 May 2023 | Information Systems Research, Vol. 34, No. 2
- Information security policies compliance in a global setting: An employee's perspective
  Computers & Security, Vol. 129
- Phishing Susceptibility in Context: A Multilevel Information Processing Perspective on Deception Detection
  1 June 2023 | MIS Quarterly, Vol. 47, No. 2
- Augmenting Password Strength Meter Design Using the Elaboration Likelihood Model: Evidence from Randomized Experiments
  Warut Khern-am-nuai,
  Matthew J. Hashim,
  Alain Pinsonneault,
  Weining Yang,
  Ninghui Li
  23 March 2022 | Information Systems Research, Vol. 34, No. 1
- What Goes Around Comes Around; Effects of Unclear Questionnaire Items in Information Security Research
  26 July 2023
- Cybersecurity capabilities and cyber-attacks as drivers of investment in cybersecurity systems: A UK survey for 2018 and 2019
  Computers & Security, Vol. 124
- Accidental Insecure Behavior
  17 January 2023
- A tale of two frames: Exploring the role of framing in the use discontinuance of volitionally adopted technology
  28 June 2021 | Information Systems Journal, Vol. 32, No. 3
- Information security policy compliance-eliciting requirements for a computerized software to support value-based compliance analysis
  Computers & Security, Vol. 114
- Beyond adaptive security coping behaviors: Theory and empirical evidence
  Information & Management, Vol. 59, No. 2
- Voluntary and instrumental information security policy compliance: an integrated view of prosocial motivation, self-regulation and deterrence
  Computers & Security, Vol. 113
- How to incorporate temporal change in digital business research: The use of process theory and agent-based modeling
  Digital Business, Vol. 2, No. 2
- Citizens’ Cybersecurity Behavior: Some Major Challenges
  IEEE Security & Privacy, Vol. 20, No. 1
- Information systems security research agenda: Exploring the gap between research and practice
  The Journal of Strategic Information Systems, Vol. 30, No. 4
- Understanding Inconsistent Employee Compliance with Information Security Policies Through the Lens of the Extended Parallel Process Model
  Yan Chen,
  Dennis F. Galletta,
  Paul Benjamin Lowry,
  Xin (Robert) Luo,
  Gregory D. Moody,
  Robert Willison
  24 May 2021 | Information Systems Research, Vol. 32, No. 3
- When Digital Technologies Enable and Threaten Occupational Identity: The Delicate Balancing Act of Data Scientists
  1 September 2021 | MIS Quarterly, Vol. 45, No. 3
- Redefining threat appraisals of organizational insiders and exploring the moderating role of fear in cyberattack protection motivation
  Computers & Security, Vol. 106
- Bring Your Own Device (BYOD) as reversed IT adoption: Insights into managers’ coping strategies
  International Journal of Information Management, Vol. 56
- Toward a Unified View of Dynamic Information Security Behaviors
  22 January 2021 | ACM SIGMIS Database: the DATABASE for Advances in Information Systems, Vol. 52, No. 1
- Applying social marketing to evaluate current security education training and awareness programs in organisations
  Computers & Security, Vol. 100
- Trust calibration of automated security IT artifacts: A multi-domain study of phishing-website detection tools
  Information & Management, Vol. 58, No. 1
- POSITIVE EMOTIONS AND EMPLOYEES’ PROTECTION-MOTIVATED BEHAVIOURS: A MODERATED MEDIATION MODEL
  Journal of Business Economics and Management, Vol. 21, No. 5
- Ambivalence and Coping Responses in Post-Adoptive Information Systems Use
  18 November 2020 | Journal of Management Information Systems, Vol. 37, No. 3
- Toward a stage theory of the development of employees’ information security behavior
  Computers & Security, Vol. 93
- Information security in SMEs: determinants of CEOs’ protective and supportive behaviors
  Systèmes d'information & management, Vol. Volume 24, No. 3
- Can individuals’ neutralization techniques be overcome? A field experiment on password policy
  Computers & Security, Vol. 88
- Artificial Intelligence for Cybersecurity: A Systematic Mapping of Literature
  IEEE Access, Vol. 8
- Using Context-Based Password Strength Meter to Nudge Users' Password Generating Behavior: A Randomized Experiment
  SSRN Electronic Journal, Vol. 48

cover image Information Systems Research

Volume 30, Issue 2

June 2019

Pages iii-vii, 351-710

Article Information

Supplemental Material

Metrics

Information

Received:April 21, 2015
Accepted:August 01, 2018
Published Online:June 05, 2019

Cite as

Mari Karjalainen, Suprateek Sarker, Mikko Siponen (2019) Toward a Theory of Information Systems Security Behaviors of Organizational Employees: A Dialectical Process Perspective. Information Systems Research 30(2):687-704.

https://doi.org/10.1287/isre.2018.0827

Keywords

PDF download

Available Issues

Available Issues

Available Issues

Available Issues

Available Issues

Toward a Theory of Information Systems Security Behaviors of Organizational Employees: A Dialectical Process Perspective

Supplemental Material

Volume 30, Issue 2

Article Information

Supplemental Material

Metrics

Information

Cite as

Keywords

Sign Up for INFORMS Publications Updates and News