## 5 Discussion
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**Authors** & **Research Method** & **Sample Size** & **Findings** \\ \hline
[105] & The quantitative research methodology adopted & 112 correct responses collected & Susceptibility of the threat, the severity of the threat, certainty of detection, punishment severity and satisfaction have positive effects on secure ISB \\ \hline
[106] & The mixed-method research methodology used, and PLS is used for data and hypothesis testing & 317 correct responses were collected & Different personality traits have significant effects on ISP violating behavior \\ \hline
[38] & The quantitative research methodology was adopted. Covariant-based SEM used for research model testing. & 239 employees participated from the US department of defense & Rational use of sanctions creates attitude-dependent ISB. Attitude developed by sanction threats biased by previous punishment experience \\ \hline
[23] & Quantitative research design. PLS used for model testing & 139 employees from 10 different organizations & Deterrence factors shape employees’ norms, which influence behavioral resistance towards ISP compliance \\ \hline
[34] & A meta-analysis (literature review) & A total of 35 studies analyzed & (1) Deterrence theory (except sanction cleerity) affects ISP compliance behavior (2) deterrence effects vary with different cultures \\ \hline
[107] & Quantitative research method & 311 public sector employees participated & Information security awareness positively influences inclined employees personally and declined employees’ formal and social sanctions \\ \hline
[108] & Scenario-based quantitative study & 320 Chinese employees participated & Sanction severity, celerity, and certainty can reduce ISP violations \\ \hline \hline \end{tabular}
\end{table} 
Table 13: Cont. behavioral security literature for this SLR. Three of them were from intrinsic/extrinsic motivations and 15 from protection motivation. Intrinsic motivations are self-motivation (the act of doing something without earning any rewards). All studies have shown that this is the most effective form of motivation. If organizations' management effectively improves their workers' intrinsic motivations, they would be less likely to breach any organizational policy [8; 59]. Extrinsic motivation is described as the act of doing something for the sake of obtaining external rewards. Extrinsic incentives have been shown in research to increase ISPC and significantly impact compliance behavior [19; 36]. Protection motivation, on the other hand, is characterized as the motivation to protect oneself. Protection motivation has a long history in ISPC literature, and it has been described as one of the most effective means of motivation to protect organizational assets [61]. According to the literature, organizations use some strategies to strengthen their employees' protection motivation behaviors, such as deterrence, punishments, or fines [18; 45]. Figure 5: Behavior transformation from noncompliance to compliance with ISP. Information security culture and awareness were also found to be influential factors in ISVC. According to a literature review, information security culture and awareness are directly proportional [109]. Information security awareness enhances an organization's information security culture, and a developed security culture improves employees' information security awareness [16; 47]. Furthermore, current SLR indicated that information security culture and knowledge are solely based on management behaviors. Efficient management behaviors towards ISVC are regarded as crucial factors in enhancing compliance behaviors [77; 109]. Similarly, ten studies conclude that social behaviors are also crucial for improving compliance behaviors. Several studies have shown that top management of companies is trying to improve ISVC by enhancing their employees' social behaviors [3; 4]. **RQ2:** What are the behavioral factors concluded in studies as a significant determinant of information security policy noncompliance?