This thesis looks into the concept of risk compensation in information security. An understanding of risk compensation theory is provided along with an analysis of what elements to consider when looking at risk compensation ...