There is also evidence that computer monitoring can
lead to negative perceptions of the organization and undesirable user behaviors [1, 52].
Beyond this work, we know of no research that has explored the potential negative
consequences of security requirements, particularly in the context of ISP violations.
Furthermore, the IS literature lacks a comprehensive definition of what constitutes
negative or stressful security demands and thereby has yet to distinguish the aspects
of security requirements that can engender stress and noncompliance. We seek to
address these issues by proposing a coping-based theoretical model that depicts an
underlying relationship between SRS and ISP violation intention. As described next,
we draw from the techno stress literature and conceptualize SRS in terms of overload,
uncertainty, and complexity dimensions, and we delineate an emotion-based coping
response to SRS based on moral disengagement theory.