Institutional theory: a new perspective for research into IS/IT security in organisations

The aim of this position paper is to argue for the suitability of an institutional perspective in IS/IT (information systems/information technology) security research. Institutional theory, including some of its central concepts, is presented, along with examples of how it has been used in information systems research. A discussion of how the theory could benefit managerial IS/IT research concludes the paper.