Key points are not available for this paper at this time.
The aim of this position paper is to argue for the suitability of an institutional perspective in IS/IT (information systems/information technology) security research. Institutional theory, including some of its central concepts, is presented, along with examples of how it has been used in information systems research. A discussion of how the theory could benefit managerial IS/IT research concludes the paper.
Fredrik Björck (2004) studied this question.