Abductive innovations in information security policy development: an ethnographic study (Journal of Information Systems, 2019)
Information systems security policy implementation in practice: from best practices to situated practices (Journal of Information Systems, 2017)
Crafting Organizational Information Security Policies (Doctoral thesis, 2017)
Crafting an Information Security Policy: Insights from an Ethnographic Study (International Conference on Information Systems (ICIS), 2016)
Legitimising Information Security Policy during Policy Crafting: Exploring Legimitising Strategies (Australian Conference on Information Systems (ACIS), 2016)
Enacting Information Security Policies in Practice: Three Modes of Policy Compliance (in Materiality, Rules and Regulation New Trends in Management and Organization Studies, 2015)