Most theories of information security policy (ISP), except a few focused on the insider-centric view, are grounded in control-centric perspective, and most ISP compliance models stem from Western countries. Regulatory focus theory (RFT) proposes two modes motivational regulation, promotion prevention that supposed to motivate employee trade-off. Culture is crucial study puts control over human ...