Beyond deterrence: An expanded view of employee computer abuse

MIS Quarterly: Management Information Systems

Volumn 37, Issue 1, 2013, Pages 1-20

  Willison, Robert ^a   Warkentin, Merrill ^b  

^a NEWCASTLE UNIVERSITY BUSINESS SCHOOL   (United Kingdom)

^b MISSISSIPPI STATE UNIVERSITY   (United States)

Author keywords

Computer abuse; Deterrence; Disgruntlement; Employee computer crime; Expressive crimes; Information systems security; Insider; Instrumental crimes; Motivation; Neutralization; Organizational justice

Indexed keywords

COMPUTER SUPPORTED COOPERATIVE WORK; CRIME; MOTIVATION; PERSONNEL TRAINING; PUBLIC POLICY; SECURITY OF DATA; SECURITY SYSTEMS;

COMPUTER ABUSE; DETERRENCE; DISGRUNTLEMENT; INFORMATION SYSTEMS SECURITY; INSIDER; NEUTRALIZATION; ORGANIZATIONAL JUSTICE;

COMPUTER CRIME;

EID: 84873974226     PISSN: 02767783     EISSN: 21629730     Source Type: Journal    
DOI: 10.25300/MISQ/2013/37.1.01     Document Type: Review

References (159)

1. Adams, J. 1965. "Inequity in Social Exchange," in Advances in Experimental Social Psychology, Volume 2, L. Berkowitz (ed.), New York: Academic Press, pp. 267-299.
2. Agnew, R. 1994. "The Techniques of Neutralization and Violence," Criminology (32:4), pp. 555-580.
3. Agnew, R., and Peters, A. 1986. "The Techniques of Neutralization: An Analysis of Predisposing and Situational Factors," Criminal Justice and Behavior (13:1), pp. 81-97.
4. Allen, J. 2009. "The Combat Operator," DefenseTech, March 23 (available at http://defensetech.org/2009/03/23/guest-blog-thecombat-operator/; accessed January 24, 2010).
5. Ambrose, M., Seabright, M., and Schminke, M. 2002. "Sabotage in the Workplace: The Role of Organizational Justice," Organizational Behavior and Human Decision Processes (89:1), pp. 947-965.
6. Amir, M. 1988. "Political Terrorism and 'Common Criminality,'" in International Terrorism: Operational Issues, R. Ward and H. Smith (eds.), Chicago: The University of Illinois at Chicago, pp. 95-109.
7. Ariely, D., and Lowenstein, G. 2006. "The Heat of the Moment: the Effect of Sexual Arousal on Sexual Decision Making," Journal of Behavioral Decision Making (19:2), pp. 87-98.
8. Bandura, A. 1986. Social Foundations of Thought and Action: A Social Cognitive Theory, Englewood Cliffs, NJ: Prentice-Hall.
9. Bandura, A. 1999. "Moral Disengagement in the Perpetration of Inhumanities," Personality and Social Psychology Review (3:3), pp. 193-209.
10. Bandura, A. 2002. "Selective Moral Disengagement in the Exercise of Moral Agency," Journal of Moral Education (31:2), pp. 101-119.
11. Bandura, A., Barbaranelli, C., Caprara, G., and Pastorelli, C. 1996. "Mechanisms of Moral Disengagement in the Exercise of Moral Agency," Journal of Personality and Social Psychology (71:2), pp. 364-374.
12. Bennett, T., and Brookman, F. 2008. "Violent Street Crime: Making Sense of Seemingly Senseless Acts," International Review of Law Computers & Technology (22:1-2), pp. 171-180.
13. Benson, M. 1985. "Denying the Guilty Mind: Accounting for Involvement in a White-Collar Crime," Criminology (23:4), pp. 583-607.
14. Bies, R., and Moag, J. 1986. "Interactional Justice: Communication Criteria," in Research on Negotiations in Organizations (Volume 1), R. Lewicki., B. Sheppard., and M. Bazerman (eds.), Greenwich, CT: JAI Press, pp. 43-55.
15. Bies, R., and Tripp, T. 1998. "Revenge in Organizations: The Good, the Bad and the Ugly," in Dysfunctional Behavior in Organizations, Part B: Non-Violent Dysfunctional Behavior, R. Griffin, A. O'Leary-Kelly, and J. Collins (eds.), Stamford, CT: JAI Press, pp. 49-68.
16. Bies, R., Tripp, T., and Kramer, R. 1997. "At the Breaking Point: Cognitive and Social Dynamics of Revenge in Organizations," in Antisocial Behavior in Organizations, in R. Giacalone and J. Greenberg (eds.), Thousand Oaks, CA: Sage, pp. 18-36.
17. Block, C., and Christakos, A. 1995. Major Trends in Chicago Homicide: 1965-1994, Chicago: Illinois Criminal Justice Information Authority.
18. Boss, S., Kirsch, L., Angermermeier, I., Shingler, R., and Boss, W. 2009. "If Someone is Watching, I'll Do What I'm Asked: Manditoriness, Control, and Information Security," European Journal of Information Systems (18:2), pp. 151-164.
19. Bouffard, J. 2002. "The Influence of Emotion on Rational Decision Making in Sexual Aggression," Journal of Criminal Justice (30:2), pp. 121-134.
20. Bouffard, J., Exum, M., and Paternoster, R. 2000. "Whither the Beast? The Role of Emotions in Criminal Conduct," in Of Crime and Criminality, S. Simpson (ed.), Thousand Oaks, CA: Pine Forge, pp. 159-178.
21. Braithwaite, J. 1989. Crime, Shame and Reintegration, Cambridge, UK: Cambridge University Press.
22. Brenner, B. 2009. "Why Security Matters Again," The Global State of Information Security, Joint Annual Report, PricewaterhouseCoopers (with CSO Magazine).
23. Bulgurcu, B., Cavusoglu, H., and Benbasat, I. 2010. "Information Security Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness," MIS Quarterly (34:3), pp. 523-548.
24. Burek, M. 2006. "AFDC to TANF: The Effect of Welfare Reform on Instrumental and Expressive Crimes," Criminal Justice Studies (19:3), pp. 241-256.
25. Carmichael, S., and Piquero, A. 2004. "Sanctions, Perceived Anger, and Criminal Offending," Journal of Quantitative Criminology (20:4), pp. 371-393.
26. Carr, J. 2007. "Computer Economics Study: Insiders Top IT Pros' Worries," SC Magazine, May 10 (available at http://www.scmagazine.com/ computer-economics-study-insiders-top-it-prosworries/article/34942/; accessed May 29, 2007).
27. Chambliss, W. 1967. "Types of Deviance and the Effectiveness of Legal Sanctions," Wisconsin Law Review (3), pp. 703-719.
28. Cohen-Charash, Y., and Spector, P. 2001. "The Role of Justice in Organizations: A Meta-Analysis," Organizational Behavior and Human Decision Processes (86:2), pp. 278-321.
29. Coleman. J. 1994. The Criminal Elite: The Sociology of White- Collar Crime, New York: St. Martins.
30. Colquitt, J., Conlon, D., Wesson., Porter., C., and Ng, K. 2001. "Justice at the Millenium: A Meta-Analytic Review of 25 Years of Organizational Justice Research," Journal of Applied Psychology (86:3), pp. 425-445.
31. Copes, H. 2003. "Societal Attachments, Offending Frequency, and Techniques of Neutralization," Deviant Behavior (24:2), pp. 101-127.
32. Copes, H., and Patrick Williams, J. 2007. "Techniques of Affirmation: Deviant Behavior, Moral Commitment and Subcultural Identity," Deviant Behavior (28:3), pp. 247-272.
33. Cornish, D., and Clarke, R. 1989. "Crime Specialisation, Crime Displacement and Rational Choice Theory," in Criminal Behavior and the Justice System: Psychological Perspectives, H. Wegener., F. Losel, and J. Haisch (eds.), New York: Springer-Verlag: pp.103-117.
34. Cromwell, P., and Thurman, Q. 2003. "The Devil Made Me Do It: Use of Neutralizations by Shoplifters," Deviant Behavior (24:6), pp. 535-550.
35. CSI. 2011. "2010/2011 CSI Computer Crime and Security Survey," Computer Security Institute.
36. CSO Magazine. 2007. "E-Crime Watch Survey," (available at http://www.cert.org/archive/pdf/ecrimesummary07.pdf; accessed November 1, 2009).
37. D'Arcy, J., and Hovav, A. 2007. "Deterring Internal Information Systems Misuse," Communications of the ACM (50:10), pp. 113-117.
38. D'Arcy, J., Hovav, A., and Galletta, D. 2009. "User Awareness of Security Countermeasures and Its Impact on Information Systems Misuse: A Deterrence Approach," Information Systems Research (20:1), pp. 79-98.
39. Dawson, M. 2006. "Intimacy and Violence: Exploring the Role of Victim-Defendant Relationship in Criminal Law," The Journal of Criminal Law and Criminology (96:4), pp. 1417-1449.
40. Deloitte. 2006. "2006 Global Security Survey," Deloitte & Touche LLP (available at https://www.deloitte.com/assets/Dcom-Shared %20Assets/Documents/us-fsi-150606globalsecuritysurvey(1). pdf).
41. Deloitte. 2010. "Cyber Crime: A Clear and Present Danger." Deloitte Center for Security & Privacy Solutions, Deloitte & Touche LLP (available at http://www.deloitte.com/assets/Dcom-UnitedStates/Local%20Assets/ Documents/AERS/us-aers- Deloitte%20Cyber%20Crime%20POV%20Jan252010.pdf).
42. Dodge, R., Carver, C., and Ferguson, A. 2007. "Phishing for User Security Awareness," Computers & Security (26:1), pp. 73-80.
43. Dubois, P. 1979. Sabotage in Industry, Harmondsworth, UK: Penguin.
44. Dunegan, K., Duchon, D., and Barton, S. 1992. "Affect, Risk, and Decision Criticality: Replication and Extension in a Business Setting," Organizational Behavior and Human Decision Processes (53:3), pp. 335-351.
45. Dutton, D. 1986. "Wife Assaulter's Explanations for Assaults," Canadian Journal of Behavioral Science (18:4), pp. 381-390.
46. Ekblom, P. 1997. "Gearing Up Against Crime: A Dynamic Framework to Help Designers Keep Up With the Adaptive Changing Criminal in a Changing World," International Journal of Risk Security and Crime Prevention (2:4), pp. 249-265.
47. Eliason, S., and Dodder, R. 1999. "Techniques of Neutralization Used by Deer Poachers in the Western United States: A Research Note," Deviant Behavior (20:3), pp. 233-252.
48. th Annual Global Information Security Survey."
49. Exum, M. 2002. "The Application and Robustness of the Rational Choice Perspective in the Study of Intoxicated and Angry Intentions to Aggress," Criminology (40:4), pp. 933-966.
50. Folger, R., and Skarlicki, D. P. 1998. "A Popcorn Metaphor for Employee Aggression," in Monographs in Organizational Behavior and Industrial Relations: Volume 23, Dysfunctional Behavior in Organizations: Part A. Violent and Deviant Behavior, R. W. Griffin, A. O'Leary-Kelly, and J. Collins (eds.), Greenwich, CT: JAI Press, pp. 43-81.
51. Foltz, C. 2000. "The Impact of Deterrent Countermeasures upon Individual Intent to Commit Misuse: A Behavioral Approach," unpublished Ph.D. Dissertation, University of Arkansas.
52. Frasier, C., and Meisenhelder, T. 1985. "Exploratory Notes on Criminality and Emotional Ambivalence," Qualitative Sociology (8:3), pp. 266-284.
53. Fritzon, K. 2001. "An Examination of the Relationship Between Distance Travelled and Motivational Aspects of Firesetting Behavior," Journal of Environmental Psychology (21:1), pp. 45-60.
54. Garrett, D., Bardford, J., Meyers. R., and Becker, J. 1989. "Issues Management and Organizational Accounts: An Analysis of Corporate Responses to Accusations of Unethical Business Practices," Journal of Business Ethics (8:7), pp. 507-520.
55. Gelles, R. 1987. Violent Home, Newbury Park, CA: Sage.
56. Giacolone, R., Riordan, C., and Rosenfeld, P. 1997. "Employee Sabotage: Toward a Practitioner-Scholar Understanding," in Antisocial Behavior in Organizations, A. Robert and J. Greenberg (eds.), Thousand Oaks, CA: Sage: pp. 109-129.
57. Greenberg, J. 1990. "Employee Theft as a Reaction to Underpayment Inequity: The Hidden Cost of Pay Cuts," Journal of Applied Psychology (54:1), pp. 81-103.
58. Greenberg, J. 1993. "The Social Side of Fairness: Interpersonal and Informational Classes of Organizational Justice," in Justice in the Workplace: Approaching Fairness in Human Resource Management, R. Cropanzano (ed.), Hilldale, NJ: Earlbaum, pp. 79-103.
59. Greenberg, L., and Barling, J. 1999. "Predicting Employee Aggression Against Coworkers, Subordinates and Supervisors: The Roles of Person Behaviors and Perceived Workplace Factors," Journal of Organizational Behavior (20:6), pp. 897-913.
60. Guo, K., Yufei, Y., Archer, N., and Connelly, C. 2011. "Understanding Non-Malicious Security Violations in the Workplace: A Composite Behavior Model," Journal of Management Information Systems (28:2), pp. 203-236.
61. Hakkanen, H., Puolakka, P., and Santtila, P. 2004. "Crime Scene Actions and Offender Characteristics in Arsons," Legal and Criminal Psychology (9:2), pp. 197-214.
62. Harrington, S. 1996. "The Effects of Ethics and Personal Denial of Responsibility on Computer Abuse Judgements and Intentions," MIS Quarterly (20:3), pp. 257-277.
63. Henry, S., and Eaton, R. 1994. Degrees of Deviance: Student Accounts of Their Deviant Behavior, Salem: Sheffield Publishing Company.
64. Herath, T., and Rao, R. 2009. "Protection Motivation and Deterrence: A Framework for Security Compliance in Organizations," European Journal of Information Systems (18:2), pp. 106-125.
65. Hershcovis., M., and Barling, J. 2010. "Toward a Multi-Foci Approach to Workplace Aggression: A Meta-Analytic Review of Outcomes from Different Perpetrators," Journal of Organizational Behavior (31:1), pp. 24-44.
66. Hershcovis, M., Turner, N., Barling, J., Arnold, K., Dupre, K., and Inness, M. 2007. "Predicting Workplace Aggression: A Meta- Analysis," Journal of Applied Psychology (92:1), pp. 228-238.
67. Hinduja, S. 2007. "Neutralization Theory and Online Software Piracy: An Empirical Analysis," Ethics and Information Technology (9:3), pp. 187-204.
68. Hoffer, J., and Straub, D. 1989. "The 9 to 5 Underground: Are You Policing Computer Crimes?" Sloan Management Review (30:4), pp. 35-43.
69. Hollinger, R. 1991. "Neutralizing in the Workplace: An Empirical Analysis of Property Theft and Production Deviance," Deviant Behavior (12:2), pp. 169-202.
70. Holtz, B., and Harold, C. 2009. "Fair Today, Fair Tomorrow? A Longitudinal Investigation of Overall Justice Perceptions," Journal of Applied Psychology (94:5), pp. 1185-1199.
71. Hu Q, Xu Z, Dinev T, and Ling H. 2011. "Does Deterrence Really Work in Reducing Information Security Policy Violations by Employees?," Communications of the ACM (54:6), pp. 54-60.
72. Ingram, J., and Hinduja, S. 2008. "Neutralizing Music Piracy: An Empirical Examination," Deviant Behavior (24:4), pp. 334-366.
73. Inness, M., Barling, J., and Turner, M. 2005. "Understanding Supervisor-Targeted Aggression: A Within-Person, Between- Jobs Design," Journal of Applied Psychology (90:4), pp. 731-739.
74. Johnston, A, and Warkentin, M. 2010. "Fear Appeals and Information Security Behavior: An Empirical Study," MIS Quarterly (34:3), pp. 549-566.
75. rd Annual Meeting of the Academy of Management, D. Nagao (ed.), Briarcliff Manor, NY: Academy of Management.
76. Jones, D. 2009. "Getting Even with One's Supervisor and One's Organization: Relationships Among Types of Injustice, Desires for Revenge, and Counterproductive Work Behaviors," Journal of Organizational Behavior (30:4), pp. 525-542
77. Keeney, M., Kowalski, E., Cappelli, D., Moore, A., Shimeall, T., and Rogers, S. 2005. "Insider Threat Study: Computer Systems Sabotage in Critical Infrastructure Sectors," CERT, Software Engineering Institute, Carnegie Mellon University (available at http://www.cert.org/insider-threat/ insidercross.html ).
78. Klockars, C. 1974. The Professional Fence, New York: Free Press.
79. Lee, J., and Lee, Y. 2002. "A Holistic Model of Computer Abuse Within Organizations," Information Management and Computer Security (10:2), pp. 57-63.
80. Lee, S., Lee, S-G., and Yoo, S. 2004. "An Integrative Model of Computer Abuse Based on Social Control and General Deterrence Theories," Information and Management (41:6), pp. 707-718.
81. Lee, Y., and Larsen, K. 2009. "Threat or Coping Appraisal: Determinants of SMB Executives' Decision to Adopt Anti-Malware Software," European Journal of Information Systems (18:2), pp. 177-187.
82. Lerner, J., and Keltner, D. 2000. "Beyond Valence: Toward a Model of Emotion-Specific Influences on Judgement and Choice," Cognition & Emotion (14:4), pp. 473-493.
83. Leventhal, G. 1980. "What Should be Done With Equity Theory?," in Social Exchange: Advances in Theory and Research, K. Gergen, M. Greenberg, and R. Willis (eds.), New York: Plenum, pp. 27-55.
84. Leventhal, G., Karuza, J., and Fry, W. 1980. "Beyond Fairness: A Theory of Allocation Preferences," in Justice and Social Interaction, G. Mikula (ed.), New York: Springer-Verlag, pp. 167-218.
85. Lim, V. 2002. "The IT Way of Loafing on the Job: Cyberloafing, Neutralizing and Organizational Justice," Journal of Organizational Behavior (23:5), pp. 675-694.
86. Lim, V., and Teo, T. 2005. "Prevalence, Perceived Seriousness, Justification and Regulation of Cyberloafing in Singapore: An Exploratory Study," Information & Management (42:8), pp. 1081-1093.
87. Lind, E., and Tyler, T. 1988. The Social Psychology of Procedural Justice, New York: Plenum Press.
88. Loch, K., Carr, H., and Warkentin, M. 1992. "Threats to Information Systems: Today's Reality, Yesterday's Understanding," MIS Quarterly (16:2), pp. 173-186.
89. Lowenstein, G. 1996. "Out of Control: Visceral Influences on Behavior," Organizational Behavior and Human Decision Processes (65:3), pp. 272-292.
90. Lowenstein, G., Nagin, D., and Paternoster, R. 1997. "The Effect of Sexual Arousal on Expectations of Sexual Forcefulness," Journal of Research in Crime and Delinquency (34:4), pp. 443-473.
91. Mahmood, M., Siponen, M., Straub, D., and Rao, R. 2008. "Information Systems Security in a Digital Economy: Call for Papers," MIS Quarterly (available at http://eventseer.net/e/6368/; accessed December 31, 2011).
92. Mahmood, M. A., Siponen, M., Straub, D., Rao, R., and Raghu, T. S. 2010. "Moving Toward Black Hat Research in Information Systems Security: An Editorial Introduction to the Special Issue," MIS Quarterly (34:3), pp. 431-433.
93. Maruna, S., and Copes, H. 2005. "What Have We Learned from Five Decades of Neutralization Research?," in Crime and Justice: A Review of Research (Volume 32), M. Tonry (ed.), Chicago: The University of Chicago Press, pp. 221-320.
94. Masterson, S. S., Lewis, K., Goldman, B. M., and Taylor, M. S. 2000. "Integrating Justice and Social Exchange: The Differing Effects of Fair Procedures and Treatment on Work Relationships," Academy of Management Journal (43:4), pp. 738-748.
95. Minor, W. 1981. "Techniques of Neutralization: A Reconceptualization and Empirical Examination," Journal of Research in Crime and Delinquency (18:2), pp. 295-318.
96. Mitchell, M., and Ambrose, M. 2007. "Abusive Supervision and Workplace Deviance and the Moderating Effects of Negative Reciprocity Beliefs," Journal of Applied Psychology (92:4), pp. 1159-1168.
97. Morris, R., and Higgins, G. 2009. "Neutralizing Potential and Self- Reported Digital Piracy: A Multi-Theoretical Exploration Among College Undergraduates," Criminal Justice Review (34:2), pp. 173-195.
98. Myyry, L., Siponen, M., Pahnila, S., Vartiainen, T., and Vance, A. 2009. "What Levels of Moral Reasoning and Values Explain Adherence to Information Security Rules? An Empirical Study," European Journal of Information Systems (18:2), pp. 126-139.
99. Nagin, D. 1998. "Criminal Deterrence Research at the Outset of the Twenty-First Century," in Crime and Justice: A Review of Research (Volume 23), M. Tonry (ed.), Chicago: The University of Chicago Press, pp. 1-42.
100. Nagin, D., and Paternoster, R. 1993. "Enduring Individual Differences and Rational Choice Theories of Crime," Law & Society Review (27:3), pp.467-496.
101. th International Conference on Information Systems, J. I. DeGross and M. H. Olson (eds.), Minneapolis, MN, pp. 283-294.
102. NOP World. 2005. Hi-Tech Crime: The Impact on UK Business 2005, London: NOP World Business and Technology.
103. Nowakowski, J., and Conlon, D. 2005. "Organizational Justice: Looking Back, Looking Forward," The International Journal of Conflict Management (16:1), pp. 4-29.
104. Orlikowski, W., and Iacono, S. 2001. "Desperately Seeking the 'IT' in IT Research: A Call to Theorizing the IT Artifact," Information Systems Research (12:2), pp. 121-134.
105. Pahnila, S., Siponen, M., and Mahmood, A. 2007. "Which Factors Explain Employees' Adherence to Information Security Policies?," in Proceedings of the Pacific Asia Conference on Information Systems, Auckland, New Zealand.
106. Parker, D. 1998. Fighting Computer Crime: A New Framework for Protecting Information, New York: Wiley Computer Publishing.
107. Parker, R. N., and Smith, M. D. 1979. "Deterrence, Poverty, and Type of Homicide," The American Journal of Sociology (85:3), pp. 614-624.
108. Paternoster, R., and Simpson, S. 1996. "Sanction Threats and Appeals to Morality: Testing a Rational Choice Theory of Corporate Crime," Law and Society Review (30:3), pp. 549-584.
109. Piquero, N., and Tibbetts, S. 1996. "Specifying the Direct and Indirect Effects of Low Self-Control and Situational Factors in Offenders Decision Making: Toward a More Comparative Model of Rational Offending," Justice Quarterly (13:3), pp. 481-510.
110. Piquero, N., Tibbetts, S., and Blankenship, M. 2005. "Examining the Role of Differential Association and Techniques of Neutralization in Explaining Corporate Crime," Deviant Behavior (26:2), pp. 159-188.
111. Polk, K. 1994. When Men Kill: Scenarios of Masculinity Violence, New York: Cambridge University Press.
112. Ponemon Institute. 2010. First Annual Cost of Cyber Crime Study. ArcSight, Inc. (http://www.riskandinsurancechalkboard.com/uploads/file/Ponemon% 20Study(1).pdf).
113. Priest, T., and McGrath, J. 1970. "Techniques of Neutralization: Young Adult Marijuana Smokers," Criminology (8:2), pp. 185-194.
114. PwC. 2008. "The Global State of Information Security" Pricewaterhouse Coopers (http://www.pwcglobal.com/extweb/home.nsf/docid/ C1CD6CC69C2676D4852574 DA00785949).
115. PwC. 2010a. "E-Espionage: What Risks Does Your Organization Face from Cyber-Attacks?," Pricewaterhouse Coopers.
116. PwC. 2010b. "Trial by Fire," Pricewaterhouse Coopers Security Survey.
117. PwC/UK DoBE 2008. "Information Security Breaches Survey," Pricewaterhouse Coopers(available at http://www.pwc.co.uk/eng/publications/berr- information-security-breaches-survey-2008. html ).
118. th Annual CSI Computer Crime and Security Survey, New York: Computer Security Institute.
119. Robinson, S., and Bennett, R. 1995. "A Typology of Deviant Workplace Behaviors: A Multidimensional Scaling Study," Academy of Management Journal (38:2), pp. 555-572.
120. Robinson, S., and Bennett, R. 1997. "Workplace Deviance: Its Definition, Its Nature and Its Causes," in Research on Negotiation in Organizations (Volume 6), R. Lewicki., B. Sheppard., and R. Bies (eds.), Greenwich, CT: JAI Press, pp. 3-28.
121. Rosenberg, R., Knight, R., Prentky, R., and Lee, A. 1988. "Validating the Components of a Taxonomic System for Rapists: A Path Analytic Approach," Bulletin of the American Academy of Psychiatry and the Law (16:2), pp. 169-185.
122. Sasse, M., Brostoff, S., and Weirich, D. 2001. "Transforming the 'Weakest Link'-A Human/Computer Interaction Approach to Usable and Effective Security," BT Technology Journal (19:3), pp. 122-131.
123. Shapiro, D., Buttner, E., and Barry, B. 1994. "Explanations: What Factors Enhance Their Perceived Adequacy?," Organizational Behavior and Human Decision Processes (58:3), pp. 346-368.
124. Shaw, E. D., and Stock, H. V. 2011. "Behavioral Risk Indicators of Malicious Insider Theft of Intellectual Property: Misreading the Writing on the Wall," White Paper, Symantec, Mountain View, CA.
125. Sheppard, B. H., Lewicki, R. J., and Minton, J. W. 1992. Organizational Justice: The Search for Fairness in the Workplace, New York: Lexington Books.
126. Shropshire, J. 2009. "A Canonical Analysis of Intentional Information Security Breaches by Insiders," Information Management and Computer Security (17:4), pp. 221-234.
127. Sieh, E. 1987. "Garment Workers: Perceptions of Inequity and Employee Theft," British Journal of Criminology (27:2), pp. 174-191.
128. Siponen, M., and Vance, A. 2010. "Neutralization: New Insights into the Problem of Employee Information Systems Security Policy Violations," MIS Quarterly (34:3), pp. 487-502.
129. th International Conference on Information Systems, Paris, France, December 14-17.
130. Skarlicki, D., and Folger, R. 1997. "Retaliation in the Workplace: The Role of Distributive, Procedural and Interactional Justice," Journal of Applied Psychology (82:3), pp. 434-443.
131. Skarlicki, D., Folger, R., and Tesluk, P. 1999. "Personality as a Moderator in the Relationship Between Fairness and Retaliation," Academy of Management Journal (42:1), pp. 100-108.
132. Smith, R. F. 2009. "When Good Admins Go Bad: The Critical Need for Log Management as a Deterrent/Detective Control," White Paper, Alert Logic (http://www.alertlogic.com/).
133. Stanton, J. M., Stam, K. R., Mastrangelo, P., and Jolton, J. 2005. "Analysis of End User Security Behaviors," Computers & Security (24:2), pp. 124-133.
134. Straub, D. 1990. "Effective IS Security: An Empirical Study," Information Systems Research (1:3), pp. 255-276.
135. Straub, D., Carlson, P., and Jones, E. 1992. "Deterring Highly Motivated Computer Abusers: A Field Experiment in Computer Security," in IT Security: The Needs for International Cooperation, G. Gable and W. Caelli (eds.), Amsterdam: Elsevier Science Publishers, pp. 309-324.
136. Straub, D., and Welke, R. 1998. "Coping With Systems Risks: Security Planning Models for Management Decision Making," MIS Quarterly (22:4), pp. 441-469.
137. Swanton, B. 1989. Violence and the Public Contact Workers, Canberra: Australian Institute of Criminology.
138. Sykes, G., and Matza, D. 1957. "Techniques of Neutralization: A Theory of Delinquency," American Sociological Review (22:6), pp. 664-670.
139. Thomas, C., and Williams, J. 1977. "Actors, Actions and Deterrence: A Reformulation of Chambliss's Typology of Deterrence," in Treating the Offender: Problems and Issues, M. Riedel and P. Vales (eds.), New York: Praeger.
140. Thurman, Q. 1984. "Deviance and the Neutralization of Moral Commitment: An Empirical Analysis," Deviant Behavior (5:1-4), pp. 291-304.
141. Trevino. L. 1992. "The Social Effects of Punishment in Organizations: A Justice Perspective," Academy of Management Review (17:4), pp. 647-676.
142. Tyler, T. 1990. Why People Obey the Law: Procedural Justice, Legitimacy, and Compliance, New Haven: Yale University Press.
143. Tyler, T., and Huo, Y. 2002. Trust in the Law: Encouraging Public Cooperation with the Police and Courts, New York: Russell Sage Foundation.
144. Warkentin, M. 1995. "Information Systems Security and Privacy," in Advances in Telematics, Volume 3: Emerging Information Technologies, J. Hanson (series editor), Norwood, NJ: Ablex Publishing, pp. 57-77.
145. Warkentin, M., and Johnston, A. C. 2008. "IT Governance and Organizational Development for Security Management," in Information Security Policies and Practices, D. Straub, S. Goodman and R. L. Baskerville (eds.), Armonk, NY: M. E. Sharpe, pp. 46-68.
146. Warkentin, M., Johnston, A. J., and Shropshire. J. 2011. "The Influence of the Informal Social Learning Environment on Information Privacy Policy Compliance Efficacy and Intention," European Journal of Information Systems (20:3), pp. 267-284.
147. Warkentin, M., and Willison, R. 2009. "Behavioral and Policy Issues in Information Systems Security: The Insider Threat," European Journal of Information Systems (18:2), pp. 101-105.
148. Wenzel, M. 2006. "A Letter from the Tax Office: Compliance Effects of Informational and Interpersonal Justice," Social Justice Research (19:3), pp 345-364.
149. Whittingham, M. 1981. "Vandalism-The Urge to Destroy and Damage," Canadian Journal of Criminology (23:1), pp. 69-73.
150. Willison, R. 2002. "Opportunities for Computer Abuse: Assessing a Crime Specific Approach in the Case of Barings Bank," unpublished Ph.D. Dissertation, University of London.
151. Willison, R. 2006. "Understanding the Perpetration of Employee Computer Crime in the Organisational Context," Information and Organization (16:4), pp. 304-324.
152. Willison, R., and Backhouse, J. 2006. "Opportunities for Computer Crime: Considering Systems Risk from a Criminological Perspective," European Journal of Information Systems (15:4), pp. 403-414.
153. Willison, R., and Siponen, M. 2009. "Overcoming the Insider: Reducing Employee Computer Crime through Situational Crime Prevention," Communications of the ACM (52:9), pp. 133-137.
154. Willison, R., and Warkentin, M. 2009. "Motivations for Employee Computer Crime: Understanding and Addressing Workplace Disgruntlement through the Application of Organisational Justice," in Proceedings of the IFIP TC8 International Workshop on Information Systems Security Research, A. Vance (ed.), International Federation for Information Processing, pp. 127-144.
155. Willison, R., and Warkentin, M. 2010. "The Expanded Security Action Cycle: A Temporal Analysis 'Left of Bang,'" in Proceedings of the Dewald Roode Information Security Workshop, A. Vance (ed.), International Federation for Information Processing, pp. 392-438.
156. Workman, M., Bommer, W., and Straub, D. 2008. "Security Lapses and the Omission of Information Security Measures: A Threat Control Model and Empirical Test," Computers in Human Behavior (24:6), pp. 2799-2816.
157. Workman, M., and Gathegi, J. 2007. "Punishment and Ethics Deterrents: A Study of Insider Security Contravention," Journal of the American Society for Information Science and Technology (58:2), pp. 212-222.
158. Wright, B., Caspi, A., Moffitt, T., and Paternoster, R. 2004. "Does the Risk of Punishment Deter Criminally-Prone Individuals? Rational Choice, Self-Control, and Crime," Journal of Research in Crime and Delinquency (41:2), pp. 180-213.
159. Zimring, F., and Hawkins, G. 1973. Deterrence: The Legal Threat in Crime Control, Chicago: University of Chicago Press.