Hou, Ye and Gao, Ping and Nicholson, Brian (2018) Understanding organisational responses to regulative pressures in information security management:the case of a Chinese hospital. Technological Forecasting and Social Change, 126. pp. 64-75. ISSN 0040-1625
ISM_final_tfsc.pdf - Accepted Version
Available under License Creative Commons Attribution-NonCommercial-NoDerivs.
Download (573kB)
Abstract
This paper advances existing theoretical understanding of the factors impacting upon organisational responses to regulative pressures in the process of information security management (ISM). Drawing on institutional theory, we conduct a case study of ISM in a Chinese hospital. A theoretical framework is presented, which proposes that organisational response strategies devised in response to regulative pressures are determined jointly by internal organisational incentives and external government supervision and enforcement. Practical implications for policymakers to promote organisational ISM are given and suggestions for future research based on the theoretical findings of the case study are provided.