“…Furthermore, as security fatigue is conceptualized in terms of three emotional states, our work contributes to the emerging research that considers emotions as important drivers of security policy compliance. As opposed to prior IS security studies on this subject, which focused on emotions such as fear (Johnston & Warkentin, 2010), anxiety (Burns, Roberts, Posey, & Lowry, 2019) and reactance (Lowry & Moody, 2015), our identification of frustration, tiredness and hopelessness (as per the conceptualization of security fatigue) offers a fresh set of emotional states that are relevant to security policy compliance, and so furthers IS security research on the non‐rational drivers (i.e., not pure cognitive deliberation) of this employee behaviour.…”