## 4 Results and Analysis
### Analysis of NonCompliance Behaviors
#### 4.2.3. Deterrence and Noncompliance
Moreover, attitude developed by the threat of sanctions is also biased by the previous punishment experience of employees, and that attitude affects the behavioral intention to comply with ISP. Behavioral resistance towards ISP was highlighted by [23]. The authors argued that punishment or sanctions positively affect employees' descriptive and moral norms, which later decrease resistance behavior towards ISP compliance. Deterrence (punishment severity, the certainty of detection) and the norms-based research model were tested on 139 employees from ten different organizations. The study concluded that deterrence has significant effects on norms, which substantially influences ISP resistance behavior. Reference [34] has performed a meta-analysis on deterrence theory. The meta-analysis's primary purpose was to identify the overall deterrence effects on policy compliance, cultural effects on deterrence, and the effects of the methodological choices of behavior measurement on deterrence. A total of 35 studies were analyzed from 2003 to 2018 based on the correlation between deterrence theory constructs and ISP compliance behavior. The meta-analysis concluded that all deterrence theory constructs have significant effects on compliance behaviors except sanction severity. Furthermore, sanction severity has a better correlation with noncompliance (i.e., malicious behavior), and sanction certainty correlates with positive behavior. Second, Deterrence effects vary with different organizational cultures. Third, the variance in the findings of the deterrence effects in various studies is not because of the methodological choices of behavior measurement (hypothetical and actual or generic and specific). Reference [106] introduced the concept of deterrability with a group-based study. They examined ISP awareness in groups of employees (i.e., inclined and declined). Their results confirmed that ISP awareness influenced employees' personal sanctions, whereas ISP awareness showed a partially stronger association towards declined employees' social and formal sanctions. Moreover, they found that employees who are inclined towards ISPs are nondeterrable, and employees with declined behavior towards ISPs are deterrable. Similarly, [107] examined the deterrence effects on employees' intentions towards organizational ISPs. They proved that if an employee knows that there will be a sanction or punishment for his volitional intent, employees are more likely to comply with organizational ISPs. Their results suggested that sanctions severity, sanctions celerity, and certainty positively help reduce ISP violations in an organization. Table 13 illustrates the research methods, sample sizes, and main findings of the studies evaluating deterrence and noncompliance. \begin{table}
\begin{tabular}{c c c c} \hline \hline
**Authors** & **Research Method** & **Sample Size** & **Findings** \\ \hline
[13] & Literature review & 60 articles reviewed on & Methodological and additional substantive \\  & & deterrence theory & issues are the reason for the inconsistent \\  & & results of deterrence theory \\ \hline
[104] & Pre and post-test quantitative research & & \\  & methodology used for instrument & & Deterrence, social bonds, and social \\  & validation, while PLS used for & & pressures play a vital role in preventing ISSP \\  & hypotheses and data analysis & & violation behaviors \\ \hline \hline \end{tabular}
\end{table} 
Table 13: Studies on deterrence and noncompliance.