@article{scholars15032,
       publisher = {MDPI AG},
          number = {8},
            note = {cited By 49},
          volume = {11},
         journal = {Applied Sciences (Switzerland)},
             doi = {10.3390/app11083383},
           title = {Information security behavior and information security policy compliance: a systematic literature review for identifying the transformation process from noncompliance to compliance},
            year = {2021},
            issn = {20763417},
        abstract = {A grave concern to an organization{\^a}??s information security is employees{\^a}?? behavior when they do not value information security policy compliance (ISPC). Most ISPC studies evaluate compliance and noncompliance behaviors separately. However, the literature lacks a comprehensive understanding of the factors that transform the employees{\^a}?? behavior from noncompliance to compliance. Therefore, we conducted a systematic literature review (SLR), highlighting the studies done concerning information security behavior (ISB) towards ISPC in multiple settings: research frameworks, research designs, and research methodologies over the last decade. We found that ISPC research focused more on compliance behaviors than noncompliance behaviors. Value con-flicts, security{\^a}??related stress, and neutralization, among many other factors, provided significant evidence towards noncompliance. At the same time, internal/external and protection motivations proved positively significant towards compliance behaviors. Employees perceive internal and external motivations from their social circle, management behaviors, and organizational culture to adopt security{\^a}??aware behaviors. Deterrence techniques, management behaviors, culture, and information security awareness play a vital role in transforming employees{\^a}?? noncompliance into compliance behaviors. This SLR{\^a}??s motivation is to synthesize the literature on ISPC and ISB, identifying the behavioral transformation process from noncompliance to compliance. This SLR con-tributes to information system security literature by providing a behavior transformation process model based on the existing ISPC literature. {\^A}{\copyright} 2021 by the authors. Licensee MDPI, Basel, Switzerland.},
          author = {Ali, R. F. and Dominic, P. D. D. and Ali, S. E. A. and Rehman, M. and Sohail, A.},
             url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85104172028&doi=10.3390\%2fapp11083383&partnerID=40&md5=bb4e3a4aee119b1dc1bc8c179fdf6bac}
}