Information security policy as a governance capability in politically complex legislative organizations: a tridimensional configurational model
This conceptual paper aims to examine information security policy (ISP) in Brazilian state legislative assemblies as a formal document that may operate as an institutional governance device and, under specific conditions, become a governance capability. The paper integrates sociological institutionalism, net...