Mikko T. Siponen: On the Role of Human Morality in Information System Security: The Problems of Descriptivism and Non-descriptive Foundations. SEC 2000: 401-410