Why do some employees go out of their way to follow prescribed information security protocols, while others all but ignore organizational information security measures? A body of research known as organizational citizenship behavior provides insight into this issue. Theories of organizational citizenship behavior draw mainly from the psychological and sociological disciplines. They are used to explain the behaviors of employees who act in the best interest of the company, even when they don’t have to. Examples of citizenship behaviors include information sharing, voluntary reduction of compensation, and relinquishment of power for the benefit of the organization (Nathanson & Becker 1973). Although organizational citizenship behavior has seen little exposure in the area of organizational information security compliance, it stands to provide exceptional explanatory power in this area. Information security practices, such as creating difficult passwords or conducting virus scans, are generally seen as additional tasks which require extra effort while offering no gains in personal productivity (Shropshire et al., 2006; Warkentin et al., 2004; Warkentin et al., 2006). These activities could be construed as out-of-role-behaviors because employee compliance may not be mandatory. Furthermore, it is difficult to enforce information security standards (Whitman, 2003). Thus, it would appear that those who follow information security protocols are motivated by something other than financial compensation. Currently, there has been little work toward integrating endpoint security with theories of organizational citizenship behavior. This may be due to two reasons: although it embodies a relatively mature stream of research, organizational citizenship behavior has seen little exposure within the information systems context; secondly, the behavioral aspects of endpoint security remain a critical but overlooked aspect of organizational information security. Therefore, the purpose of this research is to develop a theoretical model for predicting individual compliance with organizational information security practices. The results could be used by managers to more accurately predict adherence to information security practices and to better manage and motivate employees. Such a model might also be of utility in the area of employee selection and screening; recent political and economic events have caused an increase in demand for employees who can be trusted to safeguard sensitive information. This study provides a substantial contribution to knowledge by empirically testing a predictive model for information security compliance among employees. The findings associated with this research are offered in the form of recommendations for future theoretical and empirical research. Practical implications for entrepreneurs and policymakers are also discussed.

The electric power systems are currently being transformed through the integration of intermittent renewable energy resources and new types of electric loads. These developments run the risk of increasing mismatches between electricity supply and demand, and may cause non-favorable utilization rates of some power system components. Using Demand Response (DR) from flexible loads in the building stock is a promising solution to overcome these challenges for electricity market actors. However, as DR is not used at a large scale today, there are validity concerns regarding its cost-benefit and reliability when compared to traditional investment options in the power sector, e.g. network refurbishment. To analyze the potential in DR solutions, bottom-up simulation models which capture consumption processes in buildings is an alternative. These models must be simple enough to allow aggregations of buildings to be instantiated and at the same time intricate enough to include variations in individual behaviors of end-users. This is done so the electricity market actor can analyze how large volumes of flexibility acts in various market and power system operation contexts, but also can appreciate how individual end-users are affected by DR actions in terms of cost and comfort. The contribution of this thesis is bottom-up simulation models for generating load profiles in detached houses and office buildings. The models connect end-user behavior with the usage of appliances and hot water loads through non-homogenous Markov chains, along with physical modeling of the indoor environment and consumption of heating and cooling loads through lumped capacitance models. The modeling is based on a simplified approach where openly available data and statistics are used, i.e. data that is subject to privacy limitations, such as smart meter measurements are excluded. The models have been validated using real load data from detached houses and office buildings, related models in literature, along with energy-use statistics from national databases. The validation shows that the modeling approach is sound and can provide reasonably accurate load profiles as the error results are in alignment with related models from other research groups. This thesis is a composite thesis of five papers. Paper 1 presents a bottom-up simulation model to generate load profiles from space heating, hot water and appliances in detached houses. Paper 2 presents a data analytic framework for analyzing electricity-use from heating ventilation and air conditioning (HVAC) loads and appliance loads in an office building. Paper 3 presents a non-homogeneous Markov chain model to simulate representative occupancy profiles in single office rooms. Paper 4 utilizes the results in paper 2 and 3 to describe a bottom-up simulation model that generates load profiles in office buildings including HVAC loads and appliances. Paper 5 uses the model in paper 1 to analyze the technical feasibility of using DR to solve congestion problems in a distribution grid. / Integrering av förnybara energikällor och nya typer av laster i de elektriska energisystemen är möjliga svar till klimatförändringar och uttömning av ändliga naturresurser. Denna integration kan dock öka obalanserna mellan utbud och efterfrågan av elektricitet, och orsaka en ogynnsam utnyttjandegrad av vissa kraftsystemkomponenter. Att använda efterfrågeflexibilitet (Demand Response) i byggnadsbeståndet är en möjlig lösning till dessa problem för olika elmarknadsaktörer. Men eftersom efterfrågeflexibilitet inte används i stor skala idag finns det obesvarade frågor gällande lösningens kostnadsnytta och tillförlitlighet jämfört med traditionella investeringsalternativ i kraftsektorn. För att analysera efterfrågeflexibilitetslösningar är botten-upp-simuleringsmodeller som fångar elförbrukningsprocesser i byggnaderna ett alternativ. Dessa modeller måste vara enkla nog för att kunna representera aggregeringar av många byggnader men samtidigt tillräckligt komplicerade för att kunna inkludera unika slutanvändarbeteenden. Detta är nödvändigt när elmarknadsaktören vill analysera hur stora volymer efterfrågeflexibilitet påverkar elmarknaden och kraftsystemen, men samtidigt förstå hur styrningen inverkar på den enskilda slutanvändaren.  Bidraget från denna avhandling är botten-upp-simuleringsmodeller för generering av elförbrukningsprofiler i småhus och kontorsbyggnader. Modellerna kopplar slutanvändarbeteende med elförbrukning från apparater och varmvattenanvändning tillsammans med fysikaliska modeller av värmedynamiken i byggnaderna. Modellerna är byggda på en förenklad approach som använder öppen data och statistisk, där data som har integritetsproblem har exkluderats. Simuleringsresultat har validerats mot elförbrukningsdata från småhus och kontorsbyggnader,  relaterade modeller från andra forskargrupper samt energistatistik från nationella databaser. Valideringen visar att modellerna kan generera elförbrukningsprofiler med rimlig noggrannhet. Denna avhandling är en sammanläggningsavhandling bestående av fem artiklar. Artikel 1 presenterar botten-upp-simuleringsmodellen för genereringen av elförbrukningsprofiler från uppvärmning, varmvatten och apparater i småhus. Artikel 2 presenterar ett dataanalytiskt ramverk för analys av elanvändningen från uppvärmning, ventilation, och luftkonditioneringslaster (HVAC) och apparatlaster i en kontorsbyggnad. Artikel 3 presenterar en icke-homogen Markovkedjemodell för simulering av representativa närvaroprofiler i enskilda kontorsrum. Artikel  4 använder resultaten i artiklarna  2 och 3 för att beskriva en botten-upp-simuleringsmodell för generering av elförbrukningsprofiler från HVAC-laster och apparater i kontorsbyggnader. Artikel  5 använder modellen i artikel 1 för att analysera den tekniska möjligheten att använda efterfrågeflexibilitet för att lösa överbelastningsproblem i ett eldistributionsnät. / <p>QC 20160329</p>