NDLI: Review of IS Security Policy Compliance:Toward the Building Blocks of an IS Security Theory

Please wait, while we are loading the content...

Review of IS Security Policy Compliance:Toward the Building Blocks of an IS Security Theory

Content Provider	ACM Digital Library
Author	Leidner, Dorothy Balozian, Puzant
Abstract	An understanding of insider threats in information systems (IS) is important to help address one of the dangers lurking within organizations. This article provides a review of the literature on insider compliance (and failure of compliance) with information systems' policies in order to understand the status of IS research regarding negligent and malicious insiders. We begin by defining the terms, developing a new taxonomy of insiders, and then providing a comprehensive review of articles on IS policy compliance for the past 26 years. Grounding the analysis in the literature, we inductively identify four themes to foster Information Security policy compliance among employees. The themes are: 1) IS management philosophy, 2) procedural countermeasures, 3) technical countermeasures, and 4) environmental countermeasures. We propose that future research can draw upon these themes and use them as the building blocks of an indigenous IS security theory.
Starting Page	11
Ending Page	43
Page Count	33
File Format	PDF
ISSN	00950033 15320936
DOI	10.1145/3130515.3130518
Journal	ACM SIGMIS Database: the DATABASE for Advances in Information Systems (DATB)
Volume Number	48
Issue Number	3
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2007-02-28
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Information systems security Insider threat Information systems security policy Compliance Review Noncompliance
Content Type	Text
Resource Type	Article
Subject	Management Information Systems Computer Networks and Communications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Insider threat mitigation: preventing unauthorized knowledge acquisition

Secure Team Composition to Thwart Insider Threats and Cyber-Espionage

Insider Threat Assessment:a Model-Based Methodology

Building A System For Insider Security

An adaptive threat model for security ceremonies

Blaming Noncompliance Is Too Convenient: What Really Causes Information Breaches?

From Information Security Awareness to Reasoned Compliant Action:Analyzing Information Security Policy Compliance in a Large Banking Organization

Leader’s dilemma game: An experimental design for cyber insider threat research

Security Lessons Learned from Société Générale

Review of IS Security Policy Compliance:Toward the Building Blocks of an IS Security Theory

Similar Documents

Insider threat mitigation: preventing unauthorized knowledge acquisition

Secure Team Composition to Thwart Insider Threats and Cyber-Espionage

Insider Threat Assessment:a Model-Based Methodology

Building A System For Insider Security

An adaptive threat model for security ceremonies

Blaming Noncompliance Is Too Convenient: What Really Causes Information Breaches?

From Information Security Awareness to Reasoned Compliant Action:Analyzing Information Security Policy Compliance in a Large Banking Organization

Leader’s dilemma game: An experimental design for cyber insider threat research

Security Lessons Learned from Société Générale

Review of IS Security Policy Compliance:Toward the Building Blocks of an IS Security Theory