0000000000358496
AUTHOR
Detmar W. Straub
Towards a Theoretical Model for Co-Realization of IT Value in Government
Despite decades of heavy investments in information technology (IT) and information systems (IS) in government systems and considerable amounts of research on how IS contributes to organizational performance and success, IS investments are still considered risky business. Fewer than 50% of IS projects deliver the expected functionality on time and on budget. As the world becomes increasingly more complex, IS increasingly needs to function across organizational boundaries. The added complexity is likely to add to the risks of IS investments. Hence, there is a need to improve practice and to increase the success rate of IS investments, especially in government settings. To address this fundam…
Organizational Learning to Leverage Benefits Realization Management; Evidence from a Municipal eHealth Effort
Part 3: Organizational Aspects; International audience; While work with benefits realization requires organizational learning to be effective, emphasis on organizational learning is hard to find in benefits realization studies. To remedy this research gap, we study how organizational learning theory can contribute to improve benefits realization processes. A qualitative approach was used to gain in depth understanding of benefits realization in an ICT healthcare services project. We found that individual learning is present, but organizational learning has not been given explicit attention neither in the project nor in the literature of benefits realization management. We argue that the ind…
Effects of Sanctions, Moral Beliefs, and Neutralization on Information Security Policy Violations Across Cultures
A principal concern of organizations is the failure of employees to comply with information security policies (ISPs). Deterrence theory is one of the most frequently used theories for examining ISP violations, yet studies using this theory have produced mixed results. Past research has indicated that cultural differences may be one reason for these inconsistent findings and have hence called for cross-cultural research on deterrence in information security. To address this gap, we formulated a model including deterrence, moral beliefs, shame, and neutralization techniques and tested it with the employees from 48 countries working for a large multinational company. peerReviewed
Effects of sanctions, moral beliefs, and neutralization on information security policy violations across cultures
Abstract A principal concern of organizations is the failure of employees to comply with information security policies (ISPs). Deterrence theory is one of the most frequently used theories for examining ISP violations, yet studies using this theory have produced mixed results. Past research has indicated that cultural differences may be one reason for these inconsistent findings and have hence called for cross-cultural research on deterrence in information security. To address this gap, we formulated a model including deterrence, moral beliefs, shame, and neutralization techniques and tested it with the employees from 48 countries working for a large multinational company.