Understanding the perpetration of employee computer crime in the organisational context

Information and Organization

Volumn 16, Issue 4, 2006, Pages 304-324

  Willison, Robert ^a  

^a Department of Innovation and Organizational Economics   (Denmark)

Author keywords

Criminology; Employee computer crime; IS security; Perpetration

Indexed keywords

EID: 33750683067     PISSN: 14717727     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.infoandorg.2006.08.001     Document Type: Article

References (68)

1. Audit Commission. (1998). Ghost in the machine: An analysis of IT Fraud and abuse. London: Audit Commission Publications.
2. Backhouse J., and Dhillon G. Managing computer crime: a research outlook. Computers and Security 14 7 (1995) 645-651
3. Bachman R., Paternoster R., and Ward S. The rationality of sexual offending: testing a deterrence/rational choice conception of sexual assault. Law and Society Review 26 2 (1992) 343-372
4. Bandura A. Social learning analysis of aggression. In: Ribes-Inesta E., and Bandura A. (Eds). Analysis of delinquency and aggression (1976), Lawrence Erlbaum Associates, Publishers, Hillsdale, NJ 202-232
5. Bandura A. Social learning theory (1977), Prentice Hall, Englewood Cliffs, NJ
6. Baskerville R., and Wood-Harper A. Diversity in information systems action research methods. European Journal of Information Systems 7 2 (1998) 235-246
7. Becker J. Who are the computer criminals?. ACM SIGCAS Computers and Society 12 1 (1981) 18-20
8. CSI/FBI. (2004). Computer crime and security survey. San Francisco: CSI.
9. Campbell, M. (1988). Ethics and computer security: Cause and effect. In: Proceedings of the 1988 ACM sixteenth annual conference on computer science. Atlanta, Georgia. United States.
10. Clarke R. Situational crime prevention: Theory and practice. British Journal of Criminology 20 2 (1980) 136-147
11. Cardinali R. Reinforcing our moral vision: examining the relationship between unethical behaviour and computer crime. Work Study 44 8 (1995) 11-17
12. In: Clarke R. (Ed). Situational crime prevention: Successful case studies (1992), Harrow and Heston, Albany, NY
13. In: Clarke R. (Ed). Situational crime prevention: Successful case studies. 2nd ed. (1997), Harrow and Heston, Albany, NY
14. Clarke R., and Cornish D. Modelling offender's decisions : a framework for policy and research. In: Tonry M., and Morris N. (Eds). Crime and justice: An annual review of research Vol. 6 (1985), The University of Chicago, Chicago, IL 147-185
15. Clarke R., and Cornish D. Rational Choice. In: Paternoster R., and Bachman R. (Eds). Explaining criminals and crime: Essays in contemporary criminological theory (2000), Roxbury Publishing Company, Los Angeles, CA 27-41
16. Clarke R., and Homel R. A revised classification of situational crime prevention techniques. In: Lab S. (Ed). Crime prevention at a crossroads (1997), Anderson Publishing Co, Cincinnati 21-35
17. Cornish D. Crime as scripts. In: Zahm D., and Cromwell P. (Eds). Proceedings of the international seminar on environmental criminology and crime analysis (1994), Florida Statistical Analysis Center, Florida Criminal Justice Executive Institute, Florida Department of Law Enforcement, Tallahassee, FL 30-45
18. Cornish D. The procedural analysis of offending and its relevance for situational prevention. In: Clarke R. (Ed). Crime prevention studies Vol. 3 (1994), Criminal Justice Press, Monsey, NY 151-196
19. Cornish D., and Clarke R. Situational prevention, displacement of crime and rational choice theory. In: Heal K., and Laycock G. (Eds). Situational crime prevention: From theory into practice (1986), H.M.S.O, London 1-16
20. Cornish D., and Clarke R. Crime specialisation, crime displacement and rational choice theory. In: Wegener H., Losel F., and Haisch J. (Eds). Criminal behavior and the justice system: Psychological perspective (1989), Springer-Verlag, New York 103-117
21. Cornish D., and Clarke R. Opportunities, precipitators and criminal decisions: a reply to Wortley's critique of situational crime prevention. In: Smith M., and Cornish D. (Eds). Theory for practice in situational crime prevention: Crime prevention studies Vol. 16 (2003), Criminal Justice Press, Monsey, NY 151-196
22. DTI/PWC. (2004). Information security breaches survey. London: PWC.
23. Dhillon G., and Moores S. Computer crimes: theorizing about the enemy within. Computers and Security 20 8 (2001) 715-723
24. Dhillon G., Silva L., and Backhouse J. Computer crime at CEFORMA: a case study. International Journal of Information Management 24 6 (2004) 551-561
25. Ekblom P. Proximal circumstances: a mechanism-based classification of crime prevention. In: Clarke R. (Ed). Crime prevention studies Vol. 2 (1994), Criminal Justice Press, Monsey, NY 185-232
26. Ernst & Young. (2004). Global information security survey.
27. Felson M. Crime and everyday life. 3rd ed. (2002), Sage Publications Ltd, Thousand Oaks, CA
28. Gardner H. The mind's new science: A history of the cognitive revolution (1985), Springer, New York, NY
29. Graesser A., Gordon S., and Sawyer J. Recognition memory for typical and atypical actions in scripted activities: tests of a script pointer + tag hypothesis. Journal of Verbal Learning and Verbal Behavior 18 3 (1979) 319-332
30. Goodhue D., and Straub D. Security concerns of systems users: a study of perceptions of the adequacy of security measures. Information and Management 20 1 (1991) 13-27
31. Gottfredson M., and Hirschi T. A general theory of crime (1990), Stanford University Press, Stanford, CA
32. Harrington S. The effects of ethics and personal denial of responsibility on computer abuse judgements and intentions. MIS Quarterly 20 3 (1996) 257-277
33. Hewstone M. Causal attribution: From cognitive processes to collective beliefs (1989), Blackwell, Oxford
34. Hoffer J., and Straub D. The 9 to 5 underground: are you policing computer crimes?. Sloan Management Review 30 4 (1989) 35-43
35. ISO BS17799. (2005). Information technology - security techniques - codes of practice for information security management. Switzerland: International Organization for Standardization.
36. Kesar S., and Rogerson S. Developing ethical practices to minimize computer misuse. Social Science Computer Review 16 3 (1998) 240-251
37. Klepper S., and Nagin D. Tax compliance and perceptions of the risks of detection and criminal prosecution. Law and Society Review 23 2 (1989) 209-240
38. Lacoste J., and Tremblay P. Crime and innovation: a script analysis of patterns in check forgery. In: Smith M., and Cornish D. (Eds). Theory for practice in situational crime prevention Vol. 16 (2003), Criminal Justice Press, Monsey, NY 169-196
39. Loch K., Carr H., and Warkentin M. Threats to information systems: today's reality, yesterday's understanding. MIS Quarterly 17 2 (1992) 173-186
40. Mathiassen L. Collaborative research practice. Information, Technology and People 14 4 (2002) 321-345
41. Nagin D., and Paternoster R. Enduring individual differences and rational choice theories of crime. Law and Society Review 27 3 (1993) 467-496
42. Nakamura G., Graesser A., and Zimmerman J. Script processing in a natural situation. Memory and Cognition 13 2 (1985) 140-144
43. Newman G. Introduction: towards a theory of situational crime prevention. In: Newman G., Clarke R., and Shoham S.G. (Eds). Rational choice and situational crime prevention (1997), Ashgate Dartmouth, Hants 1-23
44. Newman G., and Clarke R. Superhighway robbery: Preventing e-commerce crime (2003), Willan Publishing, Portland, Oregan
45. Parker D. Crime by computer (1976), Charles Scribner's Sons, New York
46. Parker D. Computer security management (1981), Reston Publishing Company Inc, Reston, Virginia
47. Parker D. Fighting computer crime: A new framework for protecting information (1998), Wiley Computer Publishing, New York
48. Paternoster R. Decisions to participate in and desist from four types of common delinquency. Law and Society Review 23 1 (1989) 7-40
49. Paternoster R., and Simpson S. Sanction threats and appeals to morality: testing a rational choice model of corporate crime. Law and Society Review 30 3 (1996) 549-583
50. Peltier T. Risk analysis and risk management. Information Systems Security 13 4 (2004) 44-56
51. Poyner B., and Webb B. Crime free housing (1991), Butterworth Architect, Oxford
52. Sherizen S. Can computer crime be deterred?. Security Journal 6 (1995) 177-181
53. Smith M., and Clarke R. Crime and public transport. In: Tonry M. (Ed). Crime and justice: An annual review of research Vol. 27 (2000), The University of Chicago, Chicago, IL 169-233
54. Straub D. Computer abuse and computer security: update on an empirical study. Security, Audit, and Control Review 4 2 (1986) 21-31
55. Straub, D. (1986b). Deterring computer abuse: the effectiveness of deterrent countermeasures in the computer security environment. Unpublished doctoral dissertation, Indiana University Graduate School of Business.
56. Straub D. Effective IS security: an empirical study. Information Systems Research 1 3 (1990) 255-276
57. Straub D., Carlson P., and Jones E. Deterring highly motivated computer abusers: a field experiment in computer security. In: Gable G., and Caelli W. (Eds). IT security: The needs for international cooperation (1992), Elsevier Science, Amsterdam 309-324
58. Straub D., and Nance W. Discovering and disciplining computer abuse in organisations: a field study. MIS Quarterly 14 1 (1990) 45-60
59. Straub D., and Welke R. Coping with systems risks: security planning models for management decision making. MIS Quarterly 22 4 (1998) 441-469
60. Sykes G., and Matza D. Techniques of neutralisation: a theory of delinquency. American Sociological Review 22 6 (1957) 664-670
61. Taylor S., and Crocker J. Schematic bases of social information processing. In: Higgins E., Herman C., and Zanna M. (Eds). Social cognition Vol. 1 (1981), Earlbaum, Hillsdale, NJ 89-134
62. Tremblay P., Talon B., and Hurley D. Bodyswitching and related adaptations in the resale of stolen vehicles. British Journal of Criminology 41 4 (2001) 561-579
63. Willison, R. (2002). Opportunities for computer abuse: assessing a crime specific approach in the case of Barings Bank. Unpublished PhD Thesis. University of London.
64. Willison R. Understanding the offender/context dynamic for computer crimes. Information, Technology and People 19 2 (2006) 170-186
65. Willison R., and Backhouse J. Opportunities for computer crime: considering systems risk from a criminological perspective. European Journal of Information Systems 15 4 (2006) 403-414
66. Wilson J.Q. Thinking about crime (1975), Basic Books, New York
67. Wood B. An insider threat model for adversary simulation (2002), SRI International
68. Wortley, R. (1996). Guilt, shame and situational crime prevention. In R. Homel (Ed.), The politics and practice of situational crime prevention (pp.115-132, Vol. 5). Crime Prevention Studies.