“…This is also true in an organizational context, as compliance with norms may be in the best interest of the organization as a whole, but may not lead to optimal results from the perspective of the complying individuals, projects and departments. This is not merely a philosophical stance, as several studies demonstrate that non-compliance in organizations is widespread [3,8,9]. This makes compliance a strategic issue in the current era, especially considering the high costs organizations have to pay for their Ralph Foorthuis 1 and Rik Bos 2 Accepted for presentation at GRCIS 2011, CAiSE Workshop on Governance, Risk and Compliance, London, United Kingdom.…”