Li et al., 2010: Understanding Compliance with Internet Use Policy from the Perspective of Rational Choice Theory

Topic:

Employees' compliance intention is the result of competing influences of perceived benefits, formal sanctions, and security risks. Furthermore, the effect of sanction severity is found to be moderated by personal norms.

Survey, 246 responses

Constructs in this publication:

Construct	Cites	Category	Questions given?	Content validity	Pretests	Response type	Notes
Detection probability	Peace et al., 2003				none	5 point likert scale
sanction severity	Peace et al., 2003				none	5 point likert scale
subjective norms	Peace et al., 2003				none	5 point likert scale
Perceived security risks from Internet breaches	Rhee et al., 2005				none	5 point likert scale
perceived benefits	Pee et al., 2008			7 expert panel	none	5 point likert scale	adapted from the perceived consequence scale
Personal norms	Wenzel, 2004				none	5 point likert scale
Organizational identification	Gautam et al., 2004, Wenzel, 2004				none	5 point likert scale
IUP compliance intention	Limayem et al., 2004, Peace et al., 2003				none	5 point likert scale
organizational norms	Wenzel, 2004				none	5 point likert scale

This publication is cited by the following publications:

• Cheng et al., 2013: Perceived certainty
• Cheng et al., 2013: Perceived severity
• Ifinedo, 2014: Personal norms
• Sommestad et al., 2014: Attitude towards compliance
• Sommestad et al., 2014: Intention to comply
• Sommestad et al., 2014: Normative beliefs
• Sommestad et al., 2014: Perceived benefits of non-compliance
• Sommestad et al., 2014: Perceived severity of sanctions
• Sommestad et al., 2014: Perceived Certainty of Sanctions
• Sommestad et al., 2014: Perceived vulnerability

Citation:

Han Li, Jie Zhang, and Rathindra Sarathy. Understanding compliance with internet use policy from the perspective of rational choice theory. Decision Support Systems, 48(4):635–645, March 2010. doi:10.1016/j.dss.2009.12.005.

Bibtex

@article{li_understanding_2010,
 abstract = {Current studies on compliance with security policies have largely ignored the impact of the perceived benefits of deviant behavior, personal norms, and organizational context. Drawing on the literature in criminology, this paper applies rational choice theory to examine how employees' intention to comply with Internet use policy is driven by cost\textendash{}benefit assessments, personal norms and organizational context factors. The results indicate that employees' compliance intention is the result of competing influences of perceived benefits, formal sanctions, and security risks. Furthermore, the effect of sanction severity is found to be moderated by personal norms.},
 author = {Li, Han and Zhang, Jie and Sarathy, Rathindra},
 doi = {10.1016/j.dss.2009.12.005},
 issn = {0167-9236},
 journal = {Decision Support Systems},
 keywords = {Internet abuses,Internet use policy,Rational choice,Cost benefit analysis},
 month = {March},
 number = {4},
 pages = {635-645},
 title = {Understanding Compliance with Internet Use Policy from the Perspective of Rational Choice Theory},
 volume = {48},
 year = {2010}
}

---