Motivational aspects of information security policies

Information security policy is at the heart of many organizations´ approaches to reinforcing desirable information security behaviors and enforcing strictures against undesirable security behaviors. In the present paper we use a content analysis of extant information security policies as a springboard for examining and understanding the implicit assumptions that policy-writers and other relevant stakeholders make about the causes and consequences of behavior.