enforcing information security policies through cultural boundaries

Hu, Q., Hart, P. and Cooke, D. (2007). The role of external and internal influences on information
systems security – A neo-institutional perspective. Journal of Strategic Information Systems, 16,
153-172.
Igbaria, M. (1992). An examination of microcomputer usage in Taiwan. Information and
Management, 22, 19-28.
Igbaria, M., Tor, G. and Gordon, B.D. (1995). Testing the determinants of microcomputer usage via a
structural equation model. Journal of Management Information Systems, 13(1), 127-143.
Jensen, R. and Szulanski, G. (2004). Stickiness and the adaptation of organizational practices in crossborder
knowledge transfers. Journal of International Business Studies, 35(6), 508-523.
Kabay, M.E. (2002). Developing security policies. In S. Bosworth and M. E. Kabay (Eds.), Computer
Security Handbook. 4th ed. New York: John Wiley & Sons, Inc.
Ko, D., Kirsch, L.J. and King, W.R. (2005). Antecedents of knowledge transfer from consultants to
clients in enterprise system implementations. MIS Quarterly, 29(1), 59-85.
Kogut, B. and Singh, H. (1988). The effect of national culture on the choice of entry mode. Journal of
International Business Studies, 19(3), 411-431.
Kostova, T. (1996). Success of the transnational transfer of organizational practices within
multinational companies. University of Minnesota, Minneapolis.
Kostova, T. (1999). Transnational transfer of strategic organizational practices: A contextual
perspective. Academy of Management Review, 24(2), 308-324.
Kostova, T. and Roth, K. (2002). Adoption of an organizational practice by subsidiaries of
multiniational corporations: institutional and relational effects. Academy of Management Journal,
45(1), 215-233.
Kostova, T. and Roth, K. (2003). Social capital in multinational corporations and a micro-macro
model of its formulation. Academy of Management Review, 28(2), 297-317.
Kostova, T. and Zaheer, S. (1999). Organizational legitimacy under conditions of complexity: The
case of the multinational enterprise. Academy of Management Review, 24(1), 64-81.
Levine, D. E. (2002). Monitoring and control systems. In S. Bosworth, & M. E. Kabay (Eds.),
Computer Security Handbook. 4th ed. New York: John Wiley & Sons, Inc.
Liu, W. (2004). The cross-national transfer of HRM practices in MNCs: An integrative research
model. International Journal of Manpower, 25(6), 500-517.
Minbaeva, D., Pederson, T., Bjorkman, I., Fey, C.F. and Park, H.J. 2003. MNC knowledge transfer,
subsidiary absorptive capacity, and HRM. Journal of International Business Studies, 34, 586-599.
Munir, K.A. (2002). Being different: How normative and cognitive aspects of institutional
environments influence technology transfer. Human Relations, 55(12), 1403-1428.
Pavlia, P.C. (1998). Research issues in global information technology management. Information
Resource Management Journal, 11(2), 27-36
Rosenzweig, P.M. and Singh, J.V. (1991). Organizational environments and the multinational
enterprise. Academy of Management Review, 16(2), 340-361.
Sandhu, R. (2002). Identification and authentication. In S. Bosworth, & M.E. Kabay (Eds.), Computer
Security Handbook. 4th ed. New York: John Wiley & Sons, Inc.
Scott, W.R. (1995). Institutions and Organizations. Thousand Oaks; CA: SAGE.
Shenkar, O. (2001). Cultural Distance Revisited: Towards a more rigorous conceptualization and
measurement of cultural differences. Journal of International Business Studies, 32(3), 519-535.
Siponen, M.T. (2000). Critical analysis of different approaches to minimizing user-related faults in
information systems security: implications for research and practice. Information Management &
Computer Security, 8(5), 197-209.
Sirmon, D.G. and Lane, P.J. (2004). A model of cultural differences and international alliance
performance. Journal of International Business Studies, 35(5), 306-319.
Straub, D., Keil, M. and Brenner, W. (1997). Testing the technology acceptance model across cultures:
A three country study. Information and Management, 33, 1-11.
Straub, D.W. and Welke, J.R. (1998). Coping with systems risk: Security planning models for
management decision making. MIS Quarterly, 22(4), 441.