Quotation Zellhofer, Dominik. 2018. A Conventionalist Perspective On Information Security Policies in Organisations. In ECIS 2018 Proceedings – Research-in-Progress Papers. Hrsg. AIS eLibrary, 1-14. Atlanta, GA: AIS Association for Information Systems.




Concern for information security is a major driver for policy implementation, and with new regulations like the General Data Protection Regulation, almost all types of organisations face the challenge of implementing and applying information security policies. Information security standards guide these processes, but the challenge of ensuring compliance is still a major issue, despite extensive information security research in this aspect. The lack of versatility in theoretical approaches led to calls for sociological approaches to contribute to the literature, but they were only partly addressed. The proposed framework of convention theory can serve as a fruitful approach, providing a pragmatic and contextualized perspective and a strong theoretical foundation from sociology. By adopting a conventionalist view of information security policies, attention is focused on issues of legitimacy without limiting the analysis to a solely structuralist perspective. This research in progress tries to take first steps in building a conventionalist framework for case-based research by introducing some of the main concepts of convention theory and illustrates possible implications for information security research and practice.


Press 'enter' for creating the tag

Publication's profile

Status of publication Published
Affiliation WU
Type of publication Contribution to conference proceedings
Language English
Title A Conventionalist Perspective On Information Security Policies in Organisations
Title of whole publication ECIS 2018 Proceedings – Research-in-Progress Papers.
Editor AIS eLibrary
Page from 1
Page to 14
Location Atlanta, GA
Publisher AIS Association for Information Systems
Year 2018
URL https://aisel.aisnet.org/ecis2018_rip/15
Open Access N


Zellhofer, Dominik (Details)
Interdisciplinary Institute for Management and Organizational Behavior IN (Details)
Research areas (ÖSTAT Classification 'Statistik Austria')
5324 Organizational research (Details)
5352 Human resource management, personnel management (Details)
5400 Sociology (Details)
5415 Economic sociology (Details)
5937 Information systems (Details)
Google Scholar: Search