Applying Norms and Sanctions to Promote Cybersecurity Hygiene

Cybersecurity breaches cause enormous harm to the safety, privacy, and prosperity of individuals and organizations. Many security breaches occur due to people not following security regulations such as applying software patches, updating software applications, and so on. We term these regulations as cybersecurity hygiene. This paper investigates different sanctioning mechanisms with respect to the success in establishing these regulations for cybersecurity hygiene. Our findings have implications for workforce training to promote cybersecurity.