Where academic tradition
meets the exciting future

You are here: TUCS > PUBLICATIONS > Publication Search > Influences of Frame Incongruen...

Influences of Frame Incongruence on Information Security Policy Outcomes: An Interpretive Case Study

Elina Laaksonen, Marko Niemimaa, Dan Harnesk, Influences of Frame Incongruence on Information Security Policy Outcomes: An Interpretive Case Study. International Journal of Social and Organizational Dynamics in IT 3(3), 33–50, 2013.

http://dx.doi.org/10.4018/ijsodit.2013070103

Abstract:

Despite the significant resources organizations devote to information security policies, the policies rarely produce intended outcome. Prior research has sought to explain motivations for non-compliance and suggested approaches for motivating employees for compliance using theories largely derived from psychology. However, the socio-cognitive structures that shape employees' perceptions of the policies and how they influence policy outcomes have received only modest attention. In this study, the authors draw on the socio-cognitive theory of frames and on literature on information security policies in order to suggest a theoretical and analytical concept of Information Security Policy Frames of Reference (ISPFOR). The concept is applied as a sensitizing device, in order to systematically analyze and interpret how the perceptions of policies are shaped by the frames and how they influence policy outcomes. The authors apply the sensitizing device in an interpretive case study conducted at a large multinational internet service provider. The authors’ findings suggest the frames shape the perceptions and can provide a socio-cognitive explanation for unanticipated policy outcomes. Implications for research and practice are discussed.

BibTeX entry:

@ARTICLE{jLaNiHa13a,
  title = {Influences of Frame Incongruence on Information Security Policy Outcomes: An Interpretive Case Study},
  author = {Laaksonen, Elina and Niemimaa, Marko and Harnesk, Dan},
  journal = {International Journal of Social and Organizational Dynamics in IT},
  volume = {3},
  number = {3},
  publisher = {IGI Global},
  pages = {33–50},
  year = {2013},
}

Belongs to TUCS Research Unit(s): UTU Information Systems Science (ISS)

Publication Forum rating of this publication: level 1

Edit publication