This article reviews and synthesises the main theories used to explain how organisations manage #cloud_computing, and argues that the dominant explanations are incomplete on their own. Most studies of cloud management rely on adoption models such as the Technology-Organization-Environment framework and the Diffusion of Innovation theory. These models are useful for listing the factors that push or block adoption, but they treat the firm as a fairly closed, rational decision maker. They say less about why organisations across very different sectors end up choosing similar cloud strategies, why control over computing has concentrated in a handful of very large providers, and how power and status shape what counts as a sensible cloud decision. To address these gaps, the study brings three sociological lenses into conversation with the management literature: institutional isomorphism, the work of Pierre Bourdieu on fields and capital, and world-systems theory. Using an integrative, theory-led literature review of work published mainly between 2021 and 2026, the article maps how each lens reframes a familiar management problem. Institutional theory explains the striking sameness of cloud choices as a search for legitimacy under coercive, mimetic, and normative pressure. Bourdieu reframes technical know-how and provider relationships as forms of digital capital that reproduce advantage. World-systems theory reframes the global cloud market as a #core_periphery structure in which value and control flow upward to a small number of firms and states. The synthesis produces a set of propositions and a combined framework that treats cloud management as an economic, cultural, and geopolitical practice at the same time. The argument is aimed at students and early researchers who want a critical vocabulary for studying cloud governance beyond cost-benefit checklists. Keywords: #cloud_computing, cloud management, #institutional_isomorphism, digital capital, #world_systems, data sovereignty, #cloud_governance 1. Introduction Over the last fifteen years, #cloud_computing has moved from a niche technical option to the default way that organisations buy, store, and process computing power. Universities run their email and learning systems on it. Hospitals keep patient records on it. Banks, retailers, government departments, manufacturers, and one-person startups all rent computing rather than owning every machine they use. The change has been so wide and so fast that a large research literature has grown up around a single central question: what makes organisations adopt and manage the cloud the way they do? Most of that literature answers the question with adoption and diffusion models. The Technology-Organization-Environment framework and the Diffusion of Innovation theory are the two that appear most often, frequently combined with each other or with the Technology Acceptance Model (Al Hadwer et al., 2021; Entsie et al., 2025). These models break the decision into tidy categories. They ask whether the technology is seen as useful, whether the organisation has the skills and management support to use it, and whether the surrounding environment, including competitors and regulators, pushes the organisation toward it. Reviews of the field repeatedly find the same short list of drivers: top management support, perceived relative advantage, cost savings, scalability, security concerns, and competitive pressure (Al Hadwer et al., 2021; Atuluku et al., 2022; Santos et al., 2024). These findings are valuable, and this article does not dismiss them. Anyone running a real migration needs to weigh exactly these factors, and the models give them a clear structure for doing so. The problem is what the models leave out, and the gaps matter as much as the content. The first gap concerns convergence. Adoption checklists treat each organisation as a rational unit weighing costs and benefits in isolation. They are good at describing why a given firm adopts the cloud, but weaker at explaining why so many different organisations, facing different conditions, arrive at almost identical answers. When a hospital, a law firm, and a city council all describe the same cloud-first journey in the same language and reach for the same providers, something more than independent calculation seems to be at work. The second gap concerns power. The standard models say little about who benefits when a whole sector standardises on a small set of providers, or what happens to organisations that lack the skills and relationships to negotiate good terms. They picture a market of roughly equal buyers choosing freely, when in practice the field is steeply unequal. Some organisations command discounts, dedicated engineering support, and influence over product roadmaps, while others take standard terms and absorb the full cost of dependence. The third gap concerns global structure. Mainstream models are mostly national or organisational in scope. They have little to say about the fact that a very small number of very large providers, based in a few countries, supply the infrastructure used almost everywhere else. They treat the provider market as a neutral backdrop rather than as a structure with its own geography of control (Couldry and Mejias, 2023; Mejias and Couldry, 2024). This article argues that to understand cloud management as a real social practice, and not only as a procurement decision, we need to add sociological theory to the management toolkit. Three theories are especially useful. The first is institutional isomorphism, drawn from the new institutionalism of DiMaggio and Powell (1983) and the earlier work of Meyer and Rowan (1977). It explains the sameness of cloud choices as a search for legitimacy rather than pure efficiency. The second is the field-and-capital theory of Pierre Bourdieu (1986), which lets us treat cloud expertise, certifications, and provider relationships as forms of digital capital that reproduce advantage between and within organisations (Merisalo and Makkonen, 2022; Verwiebe and Hagemann, 2024). The third is world-systems theory, associated with Immanuel Wallerstein (2004), which reframes the global cloud economy as a layered system of core, semi-periphery, and periphery, with value flowing upward through #unequal_exchange. The aim is not to replace adoption models with social theory. It is to show that the two kinds of explanation answer different questions and work better together. Adoption models tell us how a particular organisation decides. Social theory tells us why the whole population of organisations tends to move in the same direction, who gains status and control in the process, and how the pattern repeats at a global scale. A complete account of cloud management needs both the micro-level decision and the macro-level structure, and at present these live in separate literatures that rarely speak to each other. The contribution of the article is therefore threefold. It offers students and new researchers a clear map of the mainstream cloud management theories and their blind spots. It reinterprets cloud management through three established sociological lenses, showing concretely what each adds. And it proposes a combined, three-level framework, expressed as a set of testable propositions, that holds the technical, the cultural, and the geopolitical together. The structure follows the standard form. Section 2 sets out the theoretical background, first reviewing mainstream cloud management theories and then introducing the three sociological lenses. Section 3 explains the method, an integrative, theory-led review of recent literature. Section 4 analyses cloud management through each lens in turn and then combines them. Section 5 states the findings as a set of propositions and a combined framework. Section 6 concludes with implications, limitations, and directions for future research. Throughout, the discussion is kept in plain language so that readers new to social theory can follow the argument without a specialist background. 2. Background and Theoretical Framework 2.1 What "cloud computing management" means here Before bringing in theory, it helps to fix terms. By #cloud_computing this article means the on-demand delivery of computing resources, such as storage, processing, databases, and software, over a network, usually paid for by use rather than owned outright. By cloud management it means the set of organisational practices for choosing, configuring, securing, paying for, and governing those resources. This includes decisions about which deployment model to use, whether public, private, hybrid, or #multi_cloud; how to handle security and regulatory compliance; how to control and forecast spending; and how to manage the relationship with one or more providers over time (Entsie et al., 2025; Santos et al., 2024). Three features of this practice matter for the theoretical argument that follows. The first is concentration. A very large share of the world's public cloud capacity is supplied by a small number of firms, often called hyperscalers. When most organisations depend on the same few suppliers, the management problem is not only internal efficiency but also dependence, bargaining power, and vendor lock-in, the difficulty and cost of moving away from a provider once an organisation has built deeply on its services. The second feature is jurisdiction. Cloud data physically lives in data centres located in particular countries, which raises questions of data sovereignty: whose laws apply to the data, and which governments can lawfully compel access to it. The third feature is opacity. The true long-run cost, security posture, and switching cost of a cloud estate are hard for any single buyer to see clearly, which leaves a great deal of room for uncertainty in decision making. These three features, concentration, jurisdiction, and opacity, are exactly where mainstream adoption models are thin and where sociological theory has the most to add. 2.2 Mainstream cloud management theories The mainstream literature is dominated by a family of adoption and diffusion theories, and it is worth reviewing them carefully so that their strengths and limits are clear. The Technology-Organization-Environment framework, usually shortened to the #TOE_framework and traced to the work of Tornatzky and Fleischer (1990), organises the factors behind technology adoption into three contexts. The technological context covers features of the technology itself, such as relative advantage, complexity, and compatibility with existing systems. The organisational context covers internal characteristics, such as firm size, available slack resources, organisational culture, and top management support. The environmental context covers external pressures, such as competition, the regulatory regime, and the supply and maturity of vendors. Systematic reviews show that this framework is the single most common theoretical base in studies of #cloud_adoption, used either alone or combined with other models (Al Hadwer et al., 2021; Atuluku et al., 2022). Across these reviews the most frequently confirmed factors are top management support, relative advantage, cost savings, security concerns, and competitive pressure (Al Hadwer et al., 2021; Entsie et al., 2025). The Diffusion of Innovation theory, associated with Rogers (2003), adds a time dimension. It describes how an innovation spreads through a population of potential adopters, from innovators and early adopters through an early and late majority to laggards, and it stresses five qualities that speed or slow that spread: relative advantage, compatibility, complexity, trialability, and observability. In the public sector especially, reviews combine diffusion ideas with the #TOE_framework to explain why government bodies tend to adopt the cloud more slowly and more cautiously than private firms, citing compliance burdens, security concerns, and organisational resistance as the main brakes (Entsie et al., 2025). The Technology Acceptance Model and its later extensions sit at the individual level. They explain user uptake through perceived usefulness and perceived ease of use, and they are often grafted onto the #TOE_framework when researchers want to connect organisational adoption decisions with the behaviour of the individual employees who must actually use the systems (Al-Hujran et al., 2018). At the level of outcomes, some studies move past the adoption question altogether to ask whether cloud use improves organisational performance, and the answers are mixed and strongly context-dependent, which suggests that the value of the cloud depends heavily on how well it is managed rather than on adoption alone (Chang et al., 2021). These theories share an underlying picture: a more or less rational organisation, scanning its environment, weighing the properties of a technology, and adopting when the expected benefits clear a threshold. That picture is not wrong, but it is partial in three ways that the rest of this section addresses. It naturalises the menu of choices as simply given, rather than asking how that menu came to be so short. It treats the provider market as a neutral backdrop, rather than as a structured field with winners and losers. And it brackets out questions of status, power, and global position that shape both what choices appear and who gets to make them. The three sociological lenses introduced next are built precisely to handle those questions. 2.3 Institutional isomorphism The first sociological lens is institutional theory, and within it the idea of #institutional_isomorphism. The starting point, from Meyer and Rowan (1977), is that organisations adopt structures and practices not only because they work, but because they are widely believed to be the proper, modern, and responsible way to do things. Adopting such practices earns the organisation legitimacy, which in turn brings resources, partners, trust, and a better chance of survival, even when the practice is only loosely connected to what the organisation actually does day to day. In their account, formal structures often function as myth and ceremony: they signal conformity to shared expectations regardless of their effect on efficiency. DiMaggio and Powell (1983) sharpened this insight into a theory of why organisations in the same field grow to resemble one another over time, a process they called #institutional_isomorphism and captured in the memorable image of an iron cage of conformity. They identified three mechanisms. Coercive pressure comes from laws, regulations, and powerful partners on whom an organisation depends; the organisation conforms because it must, or because a key customer or funder requires it. #Mimetic_pressure operates under uncertainty; when goals are unclear or a technology is poorly understood, organisations copy peers they regard as successful or legitimate, because imitation is a low-risk response to ambiguity. Normative pressure flows from professions; as managers, consultants, engineers, and IT specialists share training, certifications, conferences, and career paths, they carry common ideas of best practice from one organisation to the next. The combined result of all three mechanisms is an #organizational_field in which member organisations become steadily more alike, not necessarily because sameness is efficient, but because it is legitimate. Institutional theory has been applied directly to the cloud. Studies frame adoption as driven partly by isomorphic pressure: regulators and standards bodies impose requirements, organisations imitate respected early movers, and a profession of cloud architects spreads shared templates and reference designs (Entsie et al., 2025). This explains a pattern that pure efficiency arguments struggle with, namely why organisations adopt very similar cloud postures even when their underlying needs differ, and why the simple observation that everyone is moving to the cloud can itself become a powerful reason to move. The theory also predicts a phenomenon that efficiency models do not anticipate at all, which is the gap between stated and actual practice. Because legitimate practices can be adopted on the surface while operations continue underneath in their own way, the public cloud strategy an organisation announces and the messy reality of its estate may diverge considerably, and both can be studied as meaningful in their own right. 2.4 Bourdieu: fields, capital, and habitus The second lens comes from the sociologist Pierre Bourdieu, whose vocabulary is well suited to questions of power and inequality that institutional theory touches only lightly. Three of his concepts are central. A field is a structured social space organised around a particular stake, with its own rules, its own currency of value, and its own hierarchy of positions. #Capital is any resource that confers advantage within a field; Bourdieu (1986) distinguished economic capital, which is money and material assets, cultural capital, which includes knowledge, skills, and credentials, and social capital, which is the value embedded in one's network and relationships. Habitus is the set of durable dispositions, learned through experience and position, that shapes how actors perceive their options and what feels natural, obvious, or unthinkable to them. Recent scholarship has extended Bourdieu directly into the digital domain. Researchers have proposed forms such as digital capital and technological capital to describe the accumulated access, skills, and dispositions that allow actors to benefit from digital systems, and have shown how these forms interact with the older economic, cultural, and social capitals to shape the so-called third level of the digital divide, which concerns not access or skills but the tangible outcomes people are able to extract from technology (Merisalo and Makkonen, 2022). Other work argues that the data extracted from individuals has itself become a new form of capital, unevenly distributed and central to the reproduction strategies of dominant actors, with middle and lower social positions trying and largely failing to compensate for their weaker command of it (Verwiebe and Hagemann, 2024). These extensions map cleanly onto cloud management. Inside an organisation, the staff who hold cloud certifications and deep architectural know-how possess valuable cultural capital that is scarce and slow to acquire. The managers with direct, trusted relationships to provider account teams possess social capital that converts into earlier access, better support, and softer commercial terms. The departments with budget possess economic capital. Together these convert into #symbolic_power, the recognised authority to define what a good cloud decision looks like, so that the person fluent in the field's architectures and standards is heard while others defer. Technical debates are therefore also status contests, and the distribution of capital shapes whose preferences become the organisation's policy. The same logic operates between organisations. Firms rich in economic and social capital negotiate enterprise agreements, volume discounts, and dedicated engineering attention, while smaller or poorer organisations accept standard terms and bear the full force of vendor lock-in. The market is not a level field of equally informed buyers; it is a stratified space in which existing advantage is converted into better cloud positions, which then generate further advantage. Bourdieu's idea of reproduction, the tendency of advantage to perpetuate itself across rounds of play, describes this process well. The concept of habitus adds a final layer that the rational-choice models miss entirely. Decision makers do not approach the cloud as blank-slate calculators. They carry dispositions formed by their training and their field, and those dispositions make some options feel obvious and others feel exotic. A team whose habitus was formed around major commercial providers will tend to experience those providers as the natural baseline, so that sovereign or open-source alternatives appear as effortful departures that require special justification. The default is not neutral; it reflects the structure of the field and the history of the people in it. This is why two equally competent teams can examine the same requirements and reach genuinely different conclusions about what a reasonable cloud posture is, without either being irrational. 2.5 World-systems theory The third lens, world-systems theory, scales the analysis up to the global level. Wallerstein (2004) argued that the modern economy is best understood not as a collection of separate national economies but as a single, integrated world-system, divided into three zones. The core consists of wealthy, technologically advanced states and firms that capture most of the value and set the rules of exchange. The #periphery supplies cheaper inputs and labour and remains dependent on the core. The semi-periphery sits in between, partly exploited by the core while itself exploiting the periphery, and serves as a kind of buffer that lends the whole system stability. The engine of the system is #unequal_exchange, in which value flows steadily upward from periphery to core, so that the hierarchy reproduces itself rather than evening out. Crucially, in the modern era this drainage no longer requires direct colonial rule; it operates through markets, standards, and global institutions. Applied to computing, this framework reframes the global cloud market as a #core_periphery structure. The infrastructure layer, the physical data centres and the platform services built on them, is concentrated in a few core firms based in a few core states. Most organisations in the world, including many large and sophisticated ones, occupy a dependent position: they rent capacity, accept default standards and pricing, and route their operations through infrastructure they neither own nor govern (Mejias and Couldry, 2024). Scholars working on what they call #data_colonialism make the structural argument explicit. Couldry and Mejias (2019, 2023) contend that the continuous extraction of data by large technology firms is best understood as a new form of colonial appropriation, in which value is taken from across the globe and accumulated by a small set of firms, with the heaviest costs falling on the periphery and the global south. In their more recent statement, Mejias and Couldry (2024) describe this as a data grab that parallels historic colonialism in its logic of extraction and dispossession, even though it is not a literal repetition of it. Zuboff (2019) reaches a related conclusion from a different starting point, arguing that the capture and trading of behavioural data has become the central accumulation strategy of the leading platform firms. Crawford (2021) adds the material dimension, showing that the energy, water, minerals, and human labour that cloud and artificial intelligence systems consume are distributed through a deeply unequal planetary geography that the clean language of the cloud hides from view. For cloud management, the world-systems lens turns familiar issues from technical footnotes into structural facts. #Vendor_lock_in is not just an unfortunate side effect of proprietary services; it is the micro-level expression of a core-periphery relationship in which the core sets the terms of dependence. #Data_sovereignty is not just a compliance box to tick; it is the question of which states and firms ultimately control the data that organisations and citizens generate, and whether foreign jurisdictions can reach it. The lens also makes sense of the semi-periphery. Some states and regions are now trying to climb the hierarchy by building sovereign cloud capacity, mandating local data residency, and investing in domestic infrastructure. In world-systems terms these are semi-peripheral strategies: bids to capture more value and control, pursued from a position that is neither fully dependent nor fully dominant. Whether such moves produce durable structural change or only modest, contingent gains in response to particular shocks is an open empirical question, but the framework supplies the right vocabulary for asking it. 2.6 Why combine the three Each lens answers a different question, and that is precisely why they belong together. Institutional theory explains horizontal sameness: why organisations within a field converge on similar practices. Bourdieu explains vertical stratification: why some actors, inside and between organisations, accumulate advantage and the authority to define good practice. World-systems theory explains global structure: why control and value concentrate in a few core firms and states. None of the three, taken alone, captures cloud management as a whole, and none of them, taken alone, can replace the practical content of the adoption models. Laid alongside the mainstream theories, however, they offer a much fuller account, in which the single firm's rational decision is nested inside a field, the field inside a market, and the market inside a global system. The analysis that follows works through each lens in turn and then draws them together into a single picture. 3. Method This study is a conceptual, integrative literature review. It does not collect new survey or interview data, and it makes no statistical claims of its own. Its purpose is to organise and reinterpret existing knowledge by reading the cloud management literature through three theoretical lenses and by building new connections between bodies of work that have largely developed in isolation. An integrative review is the appropriate design when the goal is synthesis and theory building rather than the measurement of a particular effect, and when the contribution lies in a new framing rather than a new dataset (Entsie et al., 2025). The review proceeded in four steps, and stating them plainly allows readers to judge the strength and the limits of what follows. First, scope. The study focused on two literatures. The first is the body of work on organisational cloud management and #cloud_adoption, including systematic reviews of adoption factors and studies of cloud performance and governance. The second is the body of work in sociology and critical data studies that applies institutional theory, Bourdieu, or world-systems theory to digital technology. The guiding question, held constant across all reading, was how each theory reframes the management of the cloud. Second, source selection. The priority was peer-reviewed journal articles and scholarly books, with a strong preference for sources published between 2021 and 2026, so that the empirical picture of the cloud market would be as current as possible. A small number of older works were included deliberately, because they are the foundational statements of the theories used: Meyer and Rowan (1977) and DiMaggio and Powell (1983) for institutional theory, Bourdieu (1986) for the theory of capital, Wallerstein (2004) for world-systems analysis, Tornatzky and Fleischer (1990) and Rogers (2003) for the mainstream adoption models, and Couldry and Mejias (2019) for the foundational statement of data colonialism that the more recent work develops. Including the originators alongside recent applications is standard scholarly practice and keeps the theoretical claims accurate to their sources. Third, reading and coding. Each selected source was read with three questions in mind. What does it say about why organisations adopt and manage the cloud as they do? What does it say about power, status, and inequality in that process? What does it say about the global structure of the cloud market? Sources were then grouped by the lens they most informed, whether institutional, Bourdieusian, world-systems, or mainstream adoption, while noting that several sources spoke to more than one lens at once. The coding was thematic rather than statistical: the aim was to identify recurring ideas and to trace how they connect, not to count occurrences. Fourth, synthesis. The coded material was assembled into a single argument by mapping each lens onto a recurring feature of cloud management, then drawing out the points where the lenses overlap, reinforce, or pull against one another. The output of the synthesis is the set of propositions and the combined framework presented in the findings. These are offered as a structured argument for others to test, not as conclusions that the review itself has tested empirically. Three limits of the method should be acknowledged at the outset rather than buried. Because the review is conceptual, its propositions are arguments awaiting empirical examination, not results that have already been confirmed. Because it draws on the published literature, it inherits that literature's biases, including a marked over-representation of studies from wealthier countries and well-resourced organisations, which is itself a finding worth noting. And because theory-led reading is interpretive, a different researcher applying different lenses might foreground different features of the same material; the value of the review lies in the usefulness and coherence of the framing it offers, which readers are invited to judge for themselves. 4. Analysis 4.1 Cloud management through institutional isomorphism Read through institutional theory, the most striking feature of #cloud_management is its sameness. Across sectors and countries, organisations describe their cloud journeys in remarkably similar language, adopt similar architectures, and chase similar certifications. The adoption models would explain this as many independent actors reaching the same rational conclusion because the conditions and the technology are similar. Institutional theory offers a different and, in many cases, more convincing explanation: organisations converge because convergence itself produces #legitimacy, and being seen as a competent, modern organisation can matter as much as being efficient (DiMaggio and Powell, 1983; Meyer and Rowan, 1977). The three mechanisms map cleanly onto cloud practice. Coercive pressure appears in regulation and in the demands of powerful partners. Data protection laws, sector-specific rules in finance and health, and procurement requirements all push organisations toward particular providers, particular security postures, and particular contractual forms. When a dominant customer, regulator, or funder expects a certain cloud certification or a certain residency arrangement, suppliers acquire it and customers demand it, and the practice spreads across the field not because each adopter independently judged it optimal but because the field's power-holders required it (Entsie et al., 2025). #Mimetic_pressure appears under uncertainty, which is abundant in cloud decisions because of the opacity noted earlier. Few organisations can fully evaluate the long-run cost, security, and lock-in implications of a major migration before they commit. Faced with that ambiguity, they imitate. They copy the reference architectures published by leading firms, follow the visible choices of admired peers, and treat what everyone else is doing as a serviceable proxy for what is safe. This is rational behaviour under uncertainty, but its aggregate effect is to produce field-wide cloud strategies that look less like a set of independent optimisations and more like a fashion that has hardened into a norm. Normative pressure appears through the profession of cloud and IT specialists. Shared training programmes, vendor certifications, professional bodies, conferences, and a labour market in which architects move between employers all circulate a common body of best practice. A cloud architect carries the same mental templates from one organisation to the next. Consultants apply the same playbooks across many clients. The effect is that the #organizational_field develops a shared sense of the correct way to manage the cloud, and individual organisations adopt that sense partly in order to be seen as current and credible by the very professionals they hire to advise them. The institutional lens also illuminates a quieter dynamic that the efficiency models cannot see, which is decoupling. Meyer and Rowan (1977) observed that organisations sometimes adopt legitimate practices on the surface while real operations run differently underneath. In cloud management this appears when an organisation announces a cloud-first or #multi_cloud policy that signals modernity to its board, its customers, and its regulators, while the actual estate remains far more tangled, with legacy systems, shadow deployments, and half-finished migrations. The announcement still does real work as a legitimacy claim even where execution lags behind it, which is why stated strategy and operational reality are best treated as related but separate objects of study. 4.2 Cloud management through Bourdieu Where institutional theory explains horizontal convergence, Bourdieu explains vertical stratification. The cloud, in Bourdieusian terms, is a field with its own stakes and its own hierarchy, and success in that field depends on the forms of #capital an actor can bring to bear. Consider stratification inside an organisation. The staff who hold scarce cloud skills and certifications possess cultural capital that is hard to acquire and highly valued in the field (Merisalo and Makkonen, 2022). The managers with direct, trusted relationships to provider account teams possess social capital that translates into better support, earlier access to new services, and softer terms. The departments with budget possess economic capital. These convert into #symbolic_power, the recognised authority to say what a sound cloud decision is. The person who can speak fluently about the field's architectures, services, and standards is heard, while others defer, and the more rarefied the vocabulary, the stronger the deference. Technical debates are therefore also status contests, and the distribution of digital capital quietly shapes whose preferences become the organisation's policy, often without anyone naming the dynamic explicitly. The same logic operates between organisations. Firms rich in economic and social capital negotiate enterprise agreements, volume discounts, and dedicated engineering attention, and they can credibly threaten to take their business elsewhere, which strengthens their hand. Smaller or poorer organisations take standard terms, struggle to attract scarce talent, and bear the full force of #vendor_lock_in once they have built deeply on a provider's proprietary services. The market is not a level field of equally informed buyers; it is a stratified space in which existing advantage is converted into better cloud positions, which then generate further advantage in a self-reinforcing cycle. Bourdieu's idea of reproduction describes this precisely, and recent work pushes the point further by arguing that the data extracted from users has itself become a form of capital concentrated in the hands of dominant actors, so that the digital economy tends to deepen inequality rather than dissolve it (Verwiebe and Hagemann, 2024). The concept of habitus adds the final and perhaps most subtle layer. Decision makers carry dispositions formed by their training and their position, and those dispositions make some options feel obvious and others feel strange. A team whose habitus formed around major commercial providers will tend to experience those providers as the natural baseline, so that sovereign or open-source alternatives appear as effortful departures requiring special justification, while the same alternatives might feel entirely natural to a team trained in a different setting. The default, in other words, is not neutral; it reflects the structure of the field and the biographies of the people in it. This helps explain why apparently technical preferences are so persistent and so resistant to argument, and why two competent teams can look at identical requirements and reasonably disagree about what good looks like. 4.3 Cloud management through world-systems theory The world-systems lens lifts the analysis to the global level and reframes cloud management as participation in a layered world economy rather than as a purely local choice. The infrastructure layer, the physical data centres and the platform services built on them, is concentrated in a small set of core firms headquartered in a small set of core states. Most organisations in the world, including large and capable ones, occupy a dependent position within this structure: they rent capacity, accept default standards and pricing, and route their operations through infrastructure they neither own nor govern (Mejias and Couldry, 2024). Seen this way, several familiar management problems become structural rather than merely technical. #Vendor_lock_in is not just an unfortunate consequence of choosing proprietary services; it is the micro-level expression of a #core_periphery relationship in which the core defines the terms of dependence and captures the value that dependence generates. #Data_sovereignty is not just a compliance requirement; it is the question of which states and firms ultimately control the data that organisations and citizens generate, and whether foreign legal regimes can compel its disclosure. The argument that this amounts to a form of #data_colonialism, advanced by Couldry and Mejias (2019, 2023) and developed by Mejias and Couldry (2024), holds that value extracted from across the world accumulates with a few firms, while the heaviest costs, in surveillance, dependence, and lost autonomy, fall most heavily on the periphery and the global south. Zuboff (2019) and Crawford (2021) reinforce the picture from the angles of behavioural data extraction and material planetary cost respectively, each showing that the smooth surface of the cloud conceals an uneven distribution of power and burden underneath. The world-systems lens also makes sense of the semi-periphery, a category that the other theories lack. Some states and regions are now attempting to climb the hierarchy by building sovereign cloud capacity, mandating that data stay within national borders, and investing in domestic infrastructure and skills. In world-systems terms these are semi-peripheral strategies: deliberate bids to capture more value and more control, pursued from a position that is neither fully dependent nor fully dominant. The framework predicts that such bids will be partial and contested, because the core retains advantages in standards, scale, and accumulated capability that are hard to match quickly, and it directs the researcher to ask whether a given initiative produces a durable shift in control or only a temporary adjustment to a shock such as a regulatory change or a geopolitical dispute. None of this is visible from inside an adoption checklist, which by design treats the provider market as a fixed and neutral feature of the environment. 4.4 Putting the lenses together The three lenses are not rivals competing to be the single correct explanation; they operate at different levels and, examined together, they reinforce one another in a way that none of them shows alone. Institutional pressure pushes organisations within a field to converge on similar cloud strategies in the search for #legitimacy. That convergence channels the entire field toward the same small set of dominant providers, which strengthens the #core_periphery structure that world-systems theory describes. The resulting concentration raises the value of the scarce digital capital needed to operate well within that structure, which deepens the Bourdieusian stratification both inside and between organisations. Stratification then feeds back into the institutional dynamics, because the actors richest in capital are exactly the admired peers and certified professionals whose practices others imitate and whose templates become the field's taken-for-granted norms. In short, sameness, stratification, and structure are tightly linked rather than separate. The search for legitimacy produces convergence; convergence concentrates the market; concentration rewards those with the most capital; and the dominance of those actors sets the norms that drive the next round of convergence. The loop turns continuously, and each rotation makes the next more likely. Mainstream adoption models capture none of this circulation because they stop at the boundary of the single organisation's decision, where the loop is invisible. The combined sociological reading captures the loop and, in doing so, explains features of #cloud_management that the management literature has carefully documented but not fully theorised, including the puzzle of convergence, the steepness of the provider market, and the persistence of dependence even among organisations that are well aware of its costs. 5. Findings The analysis yields a set of propositions and a combined framework. Because this is a conceptual review, these are claims for future research to test rather than findings already established by new data, and each is paired with a brief note on how it might be examined. Proposition 1: Legitimacy, not only efficiency, drives convergence. Organisations in a shared field adopt similar cloud strategies partly to secure #legitimacy under coercive, mimetic, and normative pressure. The more uncertain the costs and risks of a cloud decision, the stronger the role of #mimetic_pressure and the more the field's choices resemble a shared norm rather than a set of independent optimisations. This could be tested by examining whether organisations facing greater uncertainty are more likely to mirror the choices of high-status peers, holding their objective needs constant (DiMaggio and Powell, 1983; Entsie et al., 2025). Proposition 2: Cloud expertise is capital, and it reproduces advantage. The skills, certifications, and provider relationships needed to manage the cloud well function as #digital_capital. Actors and organisations rich in this capital accumulate #symbolic_power and better terms, while those poor in it bear the full weight of #vendor_lock_in. Over time, advantage in the cloud field tends to reproduce itself rather than even out. This could be examined through comparative case studies of how cloud policy is actually decided inside organisations, tracing whose voice prevails and why (Bourdieu, 1986; Merisalo and Makkonen, 2022; Verwiebe and Hagemann, 2024). Proposition 3: The global cloud market is a core-periphery structure. Control of cloud infrastructure is concentrated in a small set of core firms and states, placing most organisations in a position of structural dependence. Issues such as #data_sovereignty and #vendor_lock_in are best understood as expressions of this hierarchy and of #unequal_exchange, not merely as technical inconveniences. This could be tested through network analyses of provider dependence across regions and sectors (Wallerstein, 2004; Couldry and Mejias, 2023; Mejias and Couldry, 2024). Proposition 4: The three dynamics form a reinforcing loop. Institutional convergence concentrates the market on a few providers; concentration raises the value of scarce #digital_capital; the actors richest in that capital become the norm-setters whose practices others imitate; and that imitation drives the next round of convergence. Sameness, stratification, and global structure are therefore mutually reinforcing rather than separate phenomena, and interventions that target only one of them may have limited effect on the others. Proposition 5: Decoupling masks the gap between cloud claims and cloud practice. Because cloud-first and #multi_cloud postures carry legitimacy value, organisations may announce and signal them ahead of, or independently from, the messier reality of their estates. Stated strategy and operational reality should therefore be studied as related but distinct objects, since measuring only the announcements will systematically overstate how coherent and complete cloud adoption actually is (Meyer and Rowan, 1977). Proposition 6: Semi-peripheral strategies are bids for repositioning. Investments in sovereign cloud capacity, local data residency rules, and domestic infrastructure can be read as attempts to move up the global hierarchy. Their success should be judged by whether they produce durable shifts in control and value capture, or only contingent responses to particular shocks, and comparative study across several such initiatives would help distinguish the two. Taken together, these propositions support a combined framework for studying #cloud_management on three levels at once. At the field level, #institutional_isomorphism explains convergence and the pursuit of legitimacy. At the actor level, Bourdieu explains stratification through the distribution of #digital_capital and the workings of habitus. At the global level, #world_systems theory explains the #core_periphery concentration of control and the politics of #data_sovereignty. The mainstream adoption models, far from being discarded, slot into the actor and field levels as detailed accounts of how individual decisions are made within these larger structures. The value of the framework is that it treats cloud management as an economic, cultural, and geopolitical practice simultaneously, which matches how the practice actually unfolds for the people living it, rather than splitting it into separate technical and social stories that never meet. A further finding concerns the state of the literature itself. The mainstream cloud management research is rich in factor lists and adoption models but comparatively thin on power, status, and global structure (Al Hadwer et al., 2021; Atuluku et al., 2022; Santos et al., 2024). The critical data studies and sociological literatures are strong on exactly those questions but rarely engage with the operational detail of how organisations run their cloud estates day to day (Couldry and Mejias, 2023; Crawford, 2021; Zuboff, 2019). The two literatures have grown up largely apart, addressing different audiences in different languages. One contribution of this review is to argue that they need each other, and to show concretely where each can fill the other's gaps, so that the management scholar gains a vocabulary for power and the critical scholar gains traction on practice. 6. Conclusion This article set out to review the main theories of #cloud_computing management and to argue that the dominant explanations, useful as they are, leave important questions unanswered. The standard adoption models, built around the #TOE_framework and the Diffusion of Innovation theory, describe well how a single organisation decides whether to adopt the cloud and which factors weigh on that decision. What they do not explain is why entire fields of organisations converge on the same cloud strategies, why control over computing has concentrated in so few hands, and how power and status shape what counts as a sensible decision in the first place. To answer those questions, the study brought three sociological lenses into the management conversation. Institutional isomorphism reframed the sameness of cloud choices as a search for #legitimacy under coercive, mimetic, and normative pressure, and explained the gap that often opens between an organisation's stated cloud strategy and its actual estate. Bourdieu's theory of fields and #capital reframed cloud expertise and provider relationships as #digital_capital that reproduces advantage between and within organisations, and showed how habitus shapes which options feel natural before any calculation begins. World-systems theory reframed the global cloud market as a #core_periphery structure in which value and control flow upward, turning #vendor_lock_in and #data_sovereignty from technical footnotes into structural facts. The synthesis showed that these three dynamics, convergence, stratification, and global concentration, form a single reinforcing loop, and it offered a combined three-level framework that keeps the practical adoption models in place while situating them inside a larger social structure. The implications differ by audience. For students and new researchers, the central message is that #cloud_management is a legitimate object of social-scientific study, not only a technical or managerial one, and that the most interesting questions lie at the meeting point of management and sociology, where convergence, status, and global structure intersect. For managers, the value of the framework is diagnostic. It encourages them to ask whether a given cloud decision is being driven by genuine fit or by #mimetic_pressure, who in the organisation holds the #digital_capital that quietly shapes policy, and how dependence on a few providers constrains their real options regardless of what the contract says. For policymakers, the world-systems and #data_colonialism arguments clarify why #data_sovereignty and market concentration are matters of strategic autonomy rather than mere compliance, and why semi-peripheral strategies such as sovereign cloud investment should be evaluated by their effect on durable control rather than by their announcements alone. The study has clear limits, and naming them is part of the argument rather than an afterthought. Because the review is conceptual, its six propositions are arguments awaiting empirical test rather than tested results; future work could examine them through case studies of cloud decisions in particular sectors, through network analysis of provider dependence across regions, or through comparative study of sovereign cloud initiatives over time. The review also inherits the biases of its sources, which over-represent wealthier countries and well-resourced organisations, so the experience of small organisations and of the global south deserves far more direct attention than the existing literature currently provides. And because the cloud market is moving quickly, especially as artificial intelligence sharply raises the stakes of infrastructure control, the empirical picture sketched here will need regular updating even as the theoretical framework remains useful. The central claim is simple, and it is worth restating plainly. Managing the cloud is not only about choosing the cheapest or most capable provider. It is about #legitimacy within a field, about the unequal distribution of #digital_capital among the people who actually decide, and about an organisation's place in a global structure it did not design and cannot easily escape. Seeing all three at once, alongside the familiar cost-benefit questions, gives students and researchers a sharper and more honest picture of one of the defining infrastructures of contemporary organisational life. Hashtags #Cloud_Computing_Management #Cloud_Management_Theories #Institutional_Isomorphism #Bourdieu_Digital_Capital #World_Systems_Theory #Cloud_Governance #Cloud_Adoption #Data_Sovereignty #Vendor_Lock_In #Hyperscalers #Data_Colonialism #Core_Periphery #Symbolic_Power #TOE_Framework #Organizational_Field Related tags in different forms #cloudcomputing | #CloudManagement | #cloud_governance_research | #worldsystems_analysis | #institutional_theory | #STULIB | #academic_research References Al Hadwer, A., Tavana, M., Gillis, D., and Rezania, D. (2021). A systematic review of organizational factors impacting cloud-based technology adoption using the technology-organization-environment framework. Internet of Things, 15, 100407. https://doi.org/10.1016/j.iot.2021.100407 Al-Hujran, O., Al-Lozi, E. M., Al-Debei, M. M., and Maqableh, M. (2018). Challenges of cloud computing adoption from the TOE framework perspective. International Journal of E-Business Research, 14(3), 77-94. https://doi.org/10.4018/IJEBR.2018070105 Atuluku, A. R., Osang, F. B., and Adebiyi, A. A. (2022). Cloud computing adoption and use: A systematic review. Advances in Multidisciplinary and Scientific Research Journal Publication, 13(4), 29-64. Bourdieu, P. (1986). The forms of capital. In J. G. Richardson (Ed.), Handbook of theory and research for the sociology of education (pp. 241-258). Greenwood Press. Chang, I. C., Liu, C.-C., and Wu, T.-L. (2021). Does cloud computing influence enterprise performance? Journal of Organizational and End User Computing, 33(6), 1-15. Couldry, N., and Mejias, U. A. (2019). The costs of connection: How data is colonizing human life and appropriating it for capitalism. Stanford University Press. Couldry, N., and Mejias, U. A. (2023). The decolonial turn in data and technology research: What is at stake and where is it heading? Information, Communication and Society, 26(4), 786-802. https://doi.org/10.1080/1369118X.2021.1986102 Crawford, K. (2021). Atlas of AI: Power, politics, and the planetary costs of artificial intelligence. Yale University Press. https://doi.org/10.12987/9780300252392 DiMaggio, P. J., and Powell, W. W. (1983). The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields. American Sociological Review, 48(2), 147-160. https://doi.org/10.2307/2095101 Entsie, E., Aidoo, F. K. F., and Vaz, A. (2025). Systematic review of cloud computing adoption in the public sector: Insights from the TOE framework and DOI theory. Multidisciplinary Reviews, 9(2), 2026091. Mejias, U. A., and Couldry, N. (2024). Data grab: The new colonialism of Big Tech and how to fight back. University of Chicago Press. Merisalo, M., and Makkonen, T. (2022). Bourdieusian e-capital perspective enhancing digital capital discussion in the realm of third level digital divide. Information Technology and People, 35(8), 231-252. https://doi.org/10.1108/ITP-08-2021-0594 Meyer, J. W., and Rowan, B. (1977). Institutionalized organizations: Formal structure as myth and ceremony. American Journal of Sociology, 83(2), 340-363. https://doi.org/10.1086/226550 Rogers, E. M. (2003). Diffusion of innovations (5th ed.). Free Press. Santos, A., Martins, J., Pestana, P. D., Goncalves, R., Mamede, H. S., and Branco, F. (2024). Factors affecting cloud computing adoption in the education context: Systematic literature review. IEEE Access, 12, 71641-71674. Tornatzky, L. G., and Fleischer, M. (1990). The processes of technological innovation. Lexington Books. Verwiebe, R., and Hagemann, S. (2024). Bourdieu revisited: New forms of digital capital, emergence, reproduction, inequality of distribution. Information, Communication and Society, 28(11), 1861-1883. https://doi.org/10.1080/1369118X.2024.2358170 Wallerstein, I. (2004). World-systems analysis: An introduction. Duke University Press. Zuboff, S. (2019). The age of surveillance capitalism: The fight for a human future at the new frontier of power. PublicAffairs.

Cybersecurity is often taught as a technical subject, yet most breaches begin with a human decision, an organisational habit, or a gap in global capacity. This article reviews the main theories used to manage cybersecurity and arranges them into a single, easy-to-follow map. It works on three levels. At the micro level it examines #behavioural_theories such as protection motivation theory, general deterrence theory, and the theory of planned behaviour, which explain why individual employees do or do not follow security rules. At the meso level it examines organisational accounts, especially #institutional_isomorphism and socio-technical systems thinking, which explain why firms in the same sector come to look alike and why technology and people must be designed together. At the macro level it uses #world_systems_theory to explain why cybersecurity capacity is shared so unevenly between rich core countries and poorer peripheral ones. Pierre Bourdieu's ideas of field, habitus, and capital are used as a bridge that connects the three levels, because they show how routines, status, and power flow through all of them. The article is built as a structured narrative review of recent literature, most of it published within the last five years. The analysis shows that the dominant management theories are good at describing individuals and single organisations but weak at explaining global inequality and durable habits. The article proposes a layered framework that students and managers can use to diagnose security problems at the right level. It argues that strong #cybersecurity_management depends on combining technical control with an honest reading of behaviour, institutions, and global structure. Keywords: cybersecurity management; protection motivation theory; institutional isomorphism; Bourdieu; world-systems theory; security behaviour Introduction Almost every organisation now depends on digital systems, and almost every organisation is a target. Hospitals, schools, banks, small shops, and national governments all hold data that someone, somewhere, would like to steal, lock, or sell. The cost of this problem keeps rising, and the people who study it agree that #technology alone does not solve it. Firewalls, encryption, and intrusion detection matter, but the weakest point in most systems is the way people and organisations behave. A staff member who clicks a fake link, a manager who buys a tool to look compliant rather than to be safe, or a poorer country that cannot afford skilled defenders: each of these is a management problem before it is a technical one. This is why #cybersecurity_management has grown into a field of its own. Cybersecurity management is the work of planning, organising, leading, and controlling the people, processes, and technology that protect information. It asks practical questions. How do we get employees to follow the rules? How do we decide which risks to accept? Why do two banks in the same city end up with almost identical security programmes? Why are some nations far better defended than others? Each of these questions has been answered, at least in part, by a theory. A theory is simply a careful explanation of why something happens, one that can be tested and used again in new situations. The trouble is that the theories used in this field are scattered. Some come from psychology, some from criminology, some from organisation studies, and some from sociology and global political economy. Students often meet them one at a time, with no sense of how they fit together. A psychology course might teach protection motivation theory. A management course might teach risk frameworks. A sociology course might teach Pierre Bourdieu or Immanuel Wallerstein without ever mentioning computers. The result is that a learner can know each theory and still not see the whole picture. This article tries to fix that. Its aim is to bring the main #cybersecurity_management theories into one frame and show how they relate. It does not claim to invent a new theory. Instead it offers a map, and a map is useful precisely because it shows how separate places connect. The map used here has three levels. The first level is the individual, where #behavioural_theories explain the choices of single users. The second level is the organisation, where institutional theory and socio-technical thinking explain the behaviour of firms and agencies. The third level is the global system, where world-systems theory explains why whole regions differ in their ability to defend themselves. Running through all three levels are Bourdieu's tools of field, habitus, and capital, which describe how people learn routines, gain status, and exercise power inside any social space, including a security team. Three sociological lenses are given special attention because they are underused in mainstream security teaching, yet they explain things the dominant theories miss. #Institutional_isomorphism, drawn from the work of DiMaggio and Powell, explains why organisations copy one another. Bourdieu's #field_theory explains why security habits are so hard to change, even when people are told the right answer. World-systems theory explains why the benefits and burdens of digital security are spread so unequally across the planet. Recent research has begun to apply each of these to security questions, which makes this a good moment to draw the threads together. The article is written for students, so it keeps its language plain. It treats the reader as intelligent but not yet expert, and it explains each idea before using it. The structure follows the shape of a standard research article so that learners can see how such work is organised. After this introduction comes a background section that sets out the theoretical framework. A method section then explains how the literature was gathered and read. An analysis section applies the theories to real management problems. A findings section pulls the results into a single layered model and states a set of clear propositions. A conclusion reviews the contribution, admits the limits, and points to future work. The central argument can be stated simply. The theories that dominate #security_management today are mostly about individuals and single organisations. They are useful, but they are not enough. To understand why security programmes succeed or fail, we also need to see the durable habits of people, the copying behaviour of institutions, and the global structure that hands some actors strong defences and leaves others exposed. When these levels are read together, #cybersecurity_management becomes easier to diagnose and, in time, easier to improve. Background and Theoretical Framework This section sets out the theories that the rest of the article uses. It moves from the individual outward to the globe, and it introduces Bourdieu in the middle because his ideas connect the levels. The point is not to memorise definitions but to understand what each theory can and cannot explain. The micro level: behavioural theories of security Most security incidents involve a person doing something, or failing to do something. For this reason the first family of theories looks at individual #security_behaviour. The best known of these is protection motivation theory, first developed by Rogers in the 1970s to study how fear messages change health behaviour, and later carried into information security. The theory says that a person decides whether to protect themselves by weighing two appraisals. The first is threat appraisal, which combines how likely a harm seems and how severe it would be. The second is coping appraisal, which combines whether the recommended action would work, whether the person believes they can do it, and what it would cost them in effort or convenience. When the threat feels real and the response feels both effective and doable, people are more likely to act. When the response feels useless or too hard, they often do nothing, or they deny the threat. A wide review of this literature shows that protection motivation theory is one of the most used frameworks in the field and that it is usually combined with other ideas rather than used alone (Haag, Siponen, and Liu, 2021). The same review points out a weakness that matters for managers. Many studies measure intention, the stated plan to behave securely, rather than real behaviour. People often intend to use strong passwords and then do not. This gap between #intention and action is a recurring theme across the behavioural theories, and it is one reason that other levels of explanation are needed. A second important theory is general deterrence theory, which comes from criminology. It holds that people avoid breaking rules when they believe that punishment is likely, severe, and swift. Applied to security, it predicts that clear policies, monitoring, and credible sanctions will reduce risky or abusive behaviour by insiders. Deterrence is the logic behind acceptable-use policies, audit logs, and disciplinary procedures. Yet the evidence for #deterrence is mixed. In several organisational studies, perceived sanctions matter less than perceived vulnerability and the belief that the recommended action will work. Recent work on insider abuse argues that deterrence by itself is too narrow, and that we must also study the motives and controls that shape why trusted people misuse access (Burns, Roberts, Posey, Lowry, and Fuller, 2023). In other words, threats of punishment can help, but they cannot carry the whole load. A third theory is the theory of planned behaviour, which says that behaviour follows intention, and intention is shaped by three things: a person's attitude toward the behaviour, the social norms they perceive, and how much control they feel they have. This theory is useful because it brings in the social world. If your colleagues treat security as a joke, your own intention weakens, no matter what the policy says. Many models in the field blend the theory of planned behaviour, protection motivation theory, deterrence, and rational choice into combined frameworks, because each captures only part of the picture. Two further individual-level ideas are worth naming because managers meet them often. The first is the family of technology acceptance models, including the technology acceptance model and the unified theory of acceptance and use of technology. These models explain whether people will adopt and keep using a system, based on how useful and how easy to use they find it, along with social influence and the conditions that support use. Security managers care about this because a control that users find hard or pointless will be quietly avoided, and a security tool that no one adopts protects no one. The second idea is the pair of rational choice and neutralisation. Rational choice treats the user as someone weighing gains against risks, which is the same calculating actor that deterrence assumes. #Neutralisation describes the excuses people tell themselves to break a rule while still feeling honest, such as deciding that one shortcut will not matter or that everyone does it. Neutralisation is important because it shows that policy violations are not always careless; sometimes they are reasoned, and the reasoning can be addressed directly through fair rules and good communication. Taken together, these #behavioural_theories give managers a toolkit for awareness campaigns, training, and policy design. Their shared strength is attention to the individual mind. Their shared weakness is that they treat the person as a fairly free chooser who simply needs the right information and incentives. They say little about why some habits are almost impossible to shift, why whole organisations behave alike, or why a defender in one country has far more support than a defender in another. For those questions we must move up a level. The meso level: organisations, institutions, and socio-technical systems Organisations are more than collections of individuals. They have structures, cultures, and pressures of their own. Two bodies of theory help here. The first is socio-technical systems thinking. This view, which grew out of mid-twentieth-century studies of work, insists that any system has both a technical part, the tools and processes, and a social part, the people and their relationships, and that the two must be designed together. A security control that ignores how people work will be bypassed. Recent reviews of human factors in security make the same point in modern language, arguing that security must integrate technical and human-centred approaches rather than treating users as the problem to be removed (Springer International Journal of Information Security, 2025). The #socio_technical lens reframes the careless employee not as a fool but as a signal that the system was badly designed for real human behaviour. Closely tied to the socio-technical view is the idea of a #security_culture, the shared attitudes and unspoken rules that decide how seriously people take protection in their daily work. Culture is the social part of the system made visible. A strong security culture turns good behaviour into the normal, expected thing rather than an extra chore, while a weak one quietly cancels the best-written policy. Recent work treats culture as central to organisational resilience and stresses that leadership, ethics, and everyday habits shape whether technical defences hold (research on cybersecurity culture and organisational resilience, 2025). This matters because culture, unlike a firewall, cannot be bought; it has to be grown, which is one reason organisations find it so hard to change. Before turning to institutional theory it helps to name the management frameworks that organisations actually use, because these frameworks are where theory meets daily practice. Risk-management and governance models, such as the widely used national cybersecurity framework that groups activity into functions like identify, protect, detect, respond, and recover, and the international information-security management standard that requires a planned and continually improved management system, give managers a structured way to organise their defences (International Organization for Standardization, 2022). Governance models also assign responsibility, for example through the idea of separate lines of defence, where operational teams own the risk, a risk-and-compliance function oversees it, and internal audit checks both, while the board carries final accountability. These frameworks are valuable, but they are not neutral. As the next theory shows, the very fact that everyone reaches for the same frameworks is itself something that needs explaining, and the explanation reveals both the strength and the hidden danger of shared models. The second, and the main organisational theory in this article, is institutional theory, and within it the idea of #institutional_isomorphism. The word isomorphism means having the same shape. DiMaggio and Powell argued in 1983 that organisations in the same field gradually come to resemble one another, not always because the shared shape is the most efficient, but because of three pressures. The first is coercive pressure, which comes from laws, regulators, and powerful partners who demand certain practices. The second is mimetic pressure, which appears under uncertainty, when an organisation copies others that seem successful because it does not know what else to do. The third is normative pressure, which flows from professions, training, and shared standards that teach members what a proper organisation looks like. These three pressures map neatly onto cybersecurity. Coercive pressure appears as data-protection law, breach-reporting rules, and contractual demands from large customers. Mimetic pressure appears when firms adopt popular frameworks because their competitors have done so, especially when no one can be sure which controls truly prevent attacks. Normative pressure appears through professional certifications, industry bodies, and widely taught standards such as the international information-security management standard, which sets out requirements for an information security management system (International Organization for Standardization, 2022). Empirical research supports this reading. A text-analysis study of large firms found that their reported #cybersecurity responses did become more alike over time, with mimetic pressure significant across the whole period, coercive pressure strongest in the near term, and normative pressure strongest in the long run (Jeyaraj and Zadeh, 2020). Later work by the same authors examined how firms balance exploration of new defences against exploitation of known ones, again treating security as an organisational pattern rather than a purely technical choice (Jeyaraj and Zadeh, 2022). Institutional theory carries an old warning that is vital for security. Meyer and Rowan argued in 1977 that organisations often adopt formal structures as #myth_and_ceremony, signals of legitimacy that may be loosely connected to what the organisation really does. In security, this is the danger of ceremonial compliance: buying a tool, passing an audit, or printing a policy in order to look responsible, while the real defences stay weak. Scott's later synthesis of institutions and organisations gives a fuller account of how rules, norms, and shared beliefs hold these patterns in place (Scott, 2014). The institutional lens therefore does two jobs. It explains why security programmes converge, and it warns that convergence can be hollow. The bridge: Bourdieu's field, habitus, and capital Between the individual and the organisation sits a gap that the theories above do not fully close. The behavioural theories assume people choose freely; the institutional theories assume organisations respond to outside pressure. Neither explains why a person's security habits are so durable, or why status inside a security team shapes who gets heard. Pierre Bourdieu's sociology fills this gap, which is why it serves as the bridge in this article. Bourdieu offered three connected tools. A #field is a structured social space with its own rules, stakes, and hierarchy, such as the field of information security with its experts, vendors, regulators, and users. #Habitus is the set of dispositions a person absorbs through experience, a kind of practical sense that makes certain actions feel natural and others feel wrong, often below conscious thought. #Capital is the resources that give a person standing in a field, and Bourdieu identified several forms: economic capital, or money; cultural capital, or knowledge and skill; social capital, or useful relationships; and symbolic capital, or recognised prestige (Bourdieu, 1986). He summarised the relationship in a simple formula: practice grows out of habitus and capital acting within a field (Bourdieu and Wacquant, 1992). This framing is powerful for #cybersecurity_management. It explains why awareness training so often fails. Telling someone the correct answer does not rewrite a habitus formed over years of convenient shortcuts. It explains why a brilliant analyst with little social capital may be ignored, while a confident manager with strong symbolic capital sets the security agenda. It explains why certifications matter so much: they are cultural capital that converts into symbolic capital and thus into authority. A recent large study of four decades of security and privacy research used Bourdieu's forms of capital directly, treating research topics as cultural capital, citations as symbolic capital, and collaboration networks as social capital, and showed how these forms convert into one another inside the research field (Demir and colleagues, 2026). The same logic applies inside any security team, where #habitus and capital quietly decide who acts and who is heard. Bourdieu also helps connect the levels. Habitus is individual but socially produced, so it links the micro to the meso. Capital can be held by people, by firms, and by whole countries, so it links the meso to the macro. This is why Bourdieu sits in the middle of the map and touches every other theory. The macro level: world-systems theory The highest level of the map is the globe. Cybersecurity is not shared equally across the world, and world-systems theory explains the pattern. Developed by Immanuel Wallerstein, the theory treats the whole world as a single economic system rather than a set of separate nations (Wallerstein, 2004). It divides countries into three zones. The #core holds capital-intensive, high-value activity and sets the rules. The periphery supplies cheaper labour and raw inputs and tends to be exploited through unequal exchange. The semi-periphery sits in between, with some advanced sectors and some dependence, and it both exploits and is exploited. This structure appears clearly in digital security. The #core of the cyber world includes the countries and firms that design dominant platforms, write the leading standards, run the largest threat-intelligence operations, and employ the most expensive talent. The periphery often supplies lower-cost security operations work, hosts data centres, and absorbs risk that is pushed downward, while struggling to fund its own defences. The semi-periphery includes large emerging economies that have built real capacity yet remain dependent on core technology and core standards. The result is a global #digital_divide in defence: the same attack that a core bank shrugs off can cripple a peripheral hospital or municipality. World-systems theory also links back to institutional isomorphism. When international bodies, donors, or large core firms require peripheral organisations to adopt particular standards as a condition of trade or aid, that is coercive isomorphism operating across the world-system. Standards flow outward from the core, and peripheral actors adopt them to gain legitimacy and market access, sometimes faster than they can truly implement them. In this way the macro structure shapes the meso behaviour, and Bourdieu's idea of capital explains the mechanism, because core actors hold the economic, cultural, and symbolic capital that lets them define what counts as proper security. Summary of the framework The framework therefore has three levels and one bridge. At the micro level, #behavioural_theories explain individual choices but struggle with durable habits and the intention-action gap. At the meso level, institutional and #socio_technical theories explain organisational sameness and design, but can describe hollow, ceremonial compliance. At the macro level, world-systems theory explains global inequality in capacity and the outward flow of standards. Bourdieu's field, habitus, and capital run through all three, explaining why habits stick, why status matters, and how power and resources move between people, firms, and nations. The rest of the article puts this framework to work. Method This article is a conceptual study, so its method is a structured narrative review rather than an experiment or a survey. A narrative review gathers, reads, and synthesises existing research in order to build a clearer overall picture. It is the right approach when the goal is to connect scattered theories rather than to test a single hypothesis with new data. The method is described here in enough detail that a student could follow the same steps. The review had four stages. The first stage was scoping. The author defined the boundaries of the topic as the theories used to manage cybersecurity in organisations and across the global system. Purely technical material, such as the mathematics of encryption, was placed outside the scope, because the focus is on management, behaviour, institutions, and structure. Three sociological lenses were chosen in advance as theoretical anchors, namely #institutional_isomorphism, Bourdieu's field theory, and world-systems theory, because the research question asked how these underused frameworks could enrich mainstream security thinking. The second stage was searching. The author searched major academic databases and journals in information systems, management, criminology, and sociology. Search terms combined a security word, such as cybersecurity, information security, or security policy compliance, with a theory word, such as protection motivation, deterrence, planned behaviour, institutional, isomorphism, Bourdieu, habitus, capital, world-systems, core periphery, or socio-technical. The searches favoured work published within the last five years so that the picture would be current, in line with the brief for this article. Foundational sources were also included where a theory could not be discussed honestly without its original statement, because citing the origin of an idea is a matter of accuracy rather than a failure of currency. This is why a small number of older but essential works, such as the original statements of institutional isomorphism, world-systems analysis, and Bourdieu's forms of capital, appear alongside recent studies. The third stage was selection and reading. Sources were kept if they met three tests. They had to be relevant to #cybersecurity_management or to one of the chosen theories. They had to come from a credible outlet, such as a peer-reviewed journal, a recognised standards body, or a scholarly book. And they had to add something the other sources did not, so that the review covered breadth without simply repeating the same point. Each retained source was read for two things: what it claimed, and which level of the map it spoke to. This second question, the level, became the organising idea of the whole analysis. The fourth stage was synthesis. The author grouped the literature into the three levels described in the framework, micro, meso, and macro, and used Bourdieu's tools as a cross-cutting layer. Within each level the author looked for agreements, tensions, and gaps. Agreements showed where a theory was well supported. Tensions showed where theories disagreed, such as the mixed evidence on #deterrence. Gaps showed what a level could not explain on its own, which justified moving to the next level. The synthesis produced a set of propositions, stated in the findings section, that summarise the combined picture in a form students can remember and test. Two limits of this method should be named openly. First, a narrative review reflects the choices of its author, including which databases were searched and which sources were judged credible, so a different reviewer might weigh the literature a little differently. Second, the review synthesises existing studies rather than collecting new data, so its propositions are arguments to be tested, not findings proven by fresh measurement. These limits are normal for conceptual work and are revisited in the conclusion. The strength of the approach is that it turns a confusing pile of separate theories into a single ordered map, which is exactly what a student needs before doing more focused research. Analysis This section applies the framework to the real problems of #cybersecurity_management. It works level by level, then shows how the levels interact. The aim is to demonstrate that each theory explains some things well and other things poorly, and that the gaps in one level are often filled by the next. Why individual training so often disappoints Consider the most common management response to human risk: awareness training. The logic comes straight from the behavioural theories. If people understand the threat and know the correct response, protection motivation theory predicts they will act. So organisations run yearly courses, send simulated phishing emails, and post reminders. Yet breaches caused by human error continue, and many trained staff still click, reuse passwords, or share accounts. The behavioural theories themselves hint at why. Protection motivation theory shows that people weigh the cost of the recommended action, so if secure behaviour is slow or awkward, even informed users avoid it. The theory also shows that response efficacy matters: if people doubt that the action will help, they will not bother. The theory of planned behaviour adds that #social_norms shape intention, so a team culture that mocks security will defeat any training message. And across the literature there is the stubborn intention-action gap, where people plan to behave securely and then do not (Haag, Siponen, and Liu, 2021). Bourdieu explains the deeper reason. Training delivers information, but behaviour grows from #habitus, the practical dispositions a person has built over years. A single course cannot overwrite a habitus that treats convenience as normal and security as an interruption. This is why repeated, embedded practice works better than one-off lectures, and why recent human-factors research calls for adaptive, continuing approaches rather than annual events (Springer International Journal of Information Security, 2025). The lesson for managers is humbling: you are not filling an empty mind, you are trying to reshape a settled habit inside a social field that may push the other way. Deterrence and its limits Now consider deterrence. Managers often assume that monitoring and the threat of punishment will keep insiders in line. General deterrence theory supports this, and some controls clearly help. But the evidence is uneven. Several organisational studies find that fear of sanctions matters less than whether employees feel personally vulnerable and believe the recommended action works. Worse, heavy-handed monitoring can backfire by signalling distrust, which weakens the very commitment that keeps people honest. Research on insider abuse therefore argues for a richer model that looks at motives and controls together, rather than relying on punishment alone (Burns, Roberts, Posey, Lowry, and Fuller, 2023). Bourdieu again adds depth. Deterrence assumes a rational chooser calculating costs and benefits. But people inside a field also act from habitus and seek capital. An employee who feels denied recognition, a form of #symbolic_capital, may rationalise misuse in ways that no sanction schedule anticipated. A powerful manager with strong social capital may break rules quietly because the field protects high-status members. So deterrence works best not as raw threat but as part of a fair, consistent order that people accept as legitimate. Legitimacy, in turn, is an institutional idea, which moves us to the meso level. Why organisations in the same sector look alike Step back from the individual and look at whole organisations. Why do two competing banks, two universities, or two hospitals so often run security programmes that resemble each other, with the same frameworks, the same certifications, and the same job titles? Institutional isomorphism gives a clear answer. Coercive pressure from regulators and big customers forces certain practices. Mimetic pressure leads firms to copy admired peers when no one is sure which controls truly stop attacks, a condition of deep uncertainty that describes cybersecurity well. Normative pressure spreads shared models through professional bodies, certifications, and standards such as the international information-security management standard (International Organization for Standardization, 2022). The text-analysis study of large firms confirmed that #cybersecurity responses converge over time under exactly these pressures (Jeyaraj and Zadeh, 2020). This convergence has an upside and a downside. The upside is that good practice spreads quickly, and a common language lets organisations cooperate, share threat information, and trust one another's audits. The downside is the risk of #ceremonial_compliance, the myth-and-ceremony problem named long ago by Meyer and Rowan in 1977. An organisation can adopt the visible shape of security, the policy document, the certificate, the dashboard, while leaving the substance thin. When everyone copies everyone, the field can drift toward looking secure rather than being secure. A manager guided only by isomorphism might chase the same badges as competitors and mistake sameness for safety. The socio-technical lens corrects this by insisting that controls be designed around how people really work, so that the adopted structure connects to daily practice rather than floating above it. Bourdieu sharpens the picture once more. Inside the field of security, frameworks and certifications function as cultural and symbolic capital. Holding the right certificate signals membership and grants authority, which is partly why normative pressure is so strong: professionals carry the field's standards in their habitus and reproduce them wherever they go. The convergence that institutional theory describes is, in Bourdieu's terms, the circulation of capital and the reproduction of a shared habitus across organisations. The two theories are not rivals; they describe the same process from different angles. Small organisations, supply chains, and the spread of sameness The convergence described above is easiest to see in large firms, but it reaches small organisations too, often through supply chains. A small supplier that wants to sell to a large customer is frequently required, by contract, to hold a recognised certificate or to meet a checklist of controls. This is coercive isomorphism passing down a chain: the large customer, itself pushed by regulators and by its own large customers, passes the pressure to everyone it buys from. The small supplier, lacking the budget and the in-house expertise of the customer, then faces a hard choice. It can build real capacity slowly, or it can buy the minimum needed to win the contract and display the badge. Under tight resources and deep uncertainty, the second path is tempting, and the result is once again #ceremonial_compliance, this time produced by market power rather than by law. Bourdieu helps explain why the small supplier so often takes the ceremonial path. The supplier lacks the cultural capital, the deep security knowledge, to judge which controls truly matter, and it lacks the economic capital to hire that knowledge. So it imitates, copying the visible signs of security held by larger players because those signs carry symbolic capital and unlock the contract. Mimetic pressure and the pursuit of capital are, again, two descriptions of the same move. The practical danger is that attackers know this. They increasingly target the smaller, weaker links in a supply chain precisely because those links have adopted the appearance of security without the substance. A management response that understands isomorphism will therefore look past the certificate and ask whether a supplier's controls are connected to its real work, which is the socio-technical question wearing a procurement hat. Why the world is so unevenly defended Now widen the view to the whole planet. A striking fact about cybersecurity is how unequally capacity is distributed. Wealthy core organisations command large budgets, elite talent, and direct influence over the standards everyone else must follow. Many peripheral organisations, including public bodies in developing regions, run critical services on thin budgets with few skilled defenders, which leaves them badly exposed to attacks such as ransomware. Studies of local governments in developing nations show that the social and organisational side of resilience, not just the technical side, is where the gap bites hardest (recent work on ransomware vulnerability in developing-nation governments, 2026). World-systems theory frames this as structure, not accident. The #core sets the rules and holds the capital-intensive parts of the security economy, while the periphery supplies cheaper labour, hosts data, and absorbs displaced risk. Unequal exchange appears in digital form: peripheral actors often pay core firms for protection, tooling, and intelligence, sending value toward the core while remaining dependent on it. The flow of standards outward from the core is, at the same time, coercive isomorphism on a global scale, because trade and aid often require adoption of core-defined practices. So the macro and meso levels lock together. A peripheral hospital may hold an internationally recognised certificate, won under coercive pressure, and still lack the funded, skilled team that would make the certificate meaningful, which is ceremonial compliance produced by global structure. The pattern shows clearly in two resources: threat intelligence and skilled labour. Knowledge about new attacks, the raw material of modern defence, is gathered and refined mostly by core firms and agencies, then sold or shared on terms the core controls. Peripheral organisations consume this intelligence rather than producing it, which keeps them one step behind and dependent. Security labour flows the other way. Lower-cost analysts in peripheral and semi-peripheral regions staff the monitoring centres that watch over core clients, performing demanding work whose highest rewards and decisions remain in the core. This is the digital echo of the unequal exchange that world-systems theory describes, where value created at the edge accumulates at the centre. None of this is a moral charge against any individual worker or firm; it is a description of a structure that shapes what each actor can do. Bourdieu's capital explains the mechanism behind the structure. Core actors hold not only economic capital but the cultural capital of expertise and the symbolic capital of authority, which lets them define what proper security looks like for everyone else. Peripheral actors must spend scarce resources acquiring that capital on terms they did not set. The #digital_divide in defence is therefore a divide in capital, reproduced across the world-system. This is why purely technical aid, sending tools without building durable local capacity and #habitus, tends to fade once the donor leaves. Lasting improvement at the macro level depends on building local cultural capital, trained people who stay, and local institutions that hold standards in their own right, rather than renting capability from the core indefinitely. How the levels interact The real value of the framework appears when the levels are read together rather than apart. A single failure usually has causes on every level. Imagine a mid-sized public agency in a semi-peripheral country that suffers a damaging breach. At the micro level, a tired employee clicked a convincing phishing link, because secure behaviour was awkward and the threat felt distant, a textbook gap between intention and action. At the meso level, the agency had adopted a popular framework to satisfy a donor's condition, mimetic and coercive isomorphism, but it had not redesigned daily work around the controls, so compliance was largely ceremonial and socio-technically shallow. At the macro level, the agency depended on core vendors and standards while lacking the funded local talent that the core takes for granted, a world-systems pattern of dependence and uneven capital. And across all three, the habitus of staff and leaders, formed in a setting of scarce resources and borrowed rules, made the convenient, insecure path feel normal. No single theory explains this breach. Protection motivation theory explains the click but not the hollow framework. Institutional isomorphism explains the hollow framework but not the global dependence. World-systems theory explains the dependence but not the individual click. Bourdieu explains why the habits and status that shaped each level were so durable. Only the layered map explains the whole event, which is the central claim of this analysis. A good response works on the same levels at once, which is why the map is useful for action and not only for diagnosis. At the individual level, the agency would make the secure path the easy path, reducing friction so that the right behaviour costs little effort, and it would build that behaviour through repeated practice rather than a single talk, slowly reshaping #habitus. At the organisational level, it would connect its adopted framework to daily work, so that the controls on paper match the controls in use, replacing ceremony with substance and pairing every required control with a clear owner. At the global level, it would invest in durable local capital, keeping trained people and growing institutions that hold standards in their own right, rather than renting capability that vanishes when a project ends. Across all levels, leaders would model the behaviour they ask for, because a #security_culture is taught far more by example than by memo. None of these moves is dramatic on its own. Their power comes from acting together, which is exactly what a single-level theory would never suggest. Findings The analysis yields several findings. They are stated here as clear claims, followed by a set of propositions that students and researchers can test. The findings are arguments built from the reviewed literature, not measurements from new data, and they should be read in that spirit. The first finding is that #cybersecurity_management is best understood as a multi-level phenomenon. Problems and solutions live at the individual, organisational, and global levels at the same time, and a complete diagnosis must visit all three. The common practice of treating security as either a technical issue or a training issue is too narrow, because it stops at the lowest level and ignores the institutional and structural forces that shape what individuals can and will do. The second finding is that the dominant behavioural theories are necessary but not sufficient. Protection motivation theory, general deterrence theory, and the theory of planned behaviour each capture part of individual #security_behaviour, and combined models that blend them perform better than any one alone (Haag, Siponen, and Liu, 2021). Yet all of them share two limits. They lean on intention, which often fails to become action, and they treat the person as a fairly free chooser, which underrates how durable habits and social status steer behaviour. These limits are not fatal, but they explain why training and sanctions alone rarely deliver the safety managers expect. The third finding is that institutional isomorphism explains organisational convergence and warns against hollow compliance. Firms in a field come to look alike under coercive, mimetic, and normative pressure, and security responses are no exception (Jeyaraj and Zadeh, 2020). The benefit is the rapid spread of shared practice and a common language for cooperation. The cost is the temptation of #ceremonial_compliance, where the visible signs of security stand in for the substance, a risk first named by Meyer and Rowan in 1977 and still alive today. Socio-technical thinking is the antidote, because it ties adopted structures back to how people actually work. The fourth finding is that world-systems theory explains the global inequality that other theories ignore. Cyber capacity is distributed along core, semi-periphery, and periphery lines, with the core setting standards and holding the capital-intensive parts of the security economy while the periphery bears displaced risk on thin resources (Wallerstein, 2004). The outward flow of standards is itself a form of coercive isomorphism at world scale, which links the macro and meso levels and helps explain why peripheral organisations may hold certificates they cannot fully honour. The fifth finding is that Bourdieu's tools bridge the levels and explain durability. Field, habitus, and capital show why individual habits resist training, why status decides whose voice counts inside a security team, and how power and resources move between people, firms, and nations (Bourdieu, 1986; Bourdieu and Wacquant, 1992). A recent large-scale study used these very forms of capital to map a research community, demonstrating that the tools travel well into the digital security world (Demir and colleagues, 2026). The #field_theory lens turns the other theories from a list into a connected system. From these findings the article offers five propositions, written so they can be tested by future research. Proposition one. Security interventions that target habitus through repeated, embedded practice will produce more lasting behaviour change than one-off awareness training, even when both deliver the same information. Proposition two. The effect of deterrence on secure behaviour will be stronger where employees perceive the disciplinary order as legitimate and fair, and weaker where monitoring is read as distrust. Proposition three. Organisations under high mimetic pressure, that is, high uncertainty about which controls work, will show greater convergence on popular frameworks and a higher risk of ceremonial compliance than organisations under mainly coercive pressure. Proposition four. Peripheral and semi-peripheral organisations will adopt core-defined security standards faster than they build the local capacity to implement them, producing a measurable gap between certification and real protection. Proposition five. The distribution of cultural and symbolic capital inside a security team, such as certifications and recognised expertise, will predict whose risk assessments are adopted, independent of the technical merit of those assessments. The sixth finding is that the theories are complementary rather than competing, and that their value rises when they are combined. It is tempting, in a classroom or a boardroom, to ask which theory is correct, as if only one could be. The review suggests this is the wrong question. Protection motivation theory and deterrence describe different parts of the same mind. Institutional isomorphism and socio-technical thinking describe the same organisational adoption from the outside and the inside. World-systems theory and institutional isomorphism meet where global standards become local pressures. Bourdieu sits beneath all of them, explaining the durable habits and uneven capital that the others take for granted. A theory looks weak only when it is asked to do a job meant for another level. Read together, the theories cover ground that none of them could cover alone, which is the practical case for teaching them as a set. A short note on teaching follows from this. For students, the framework offers a checklist of questions rather than a single answer to memorise. Faced with any security case, a learner can ask: what is the individual being asked to do, and does the secure path feel doable and worthwhile; what is the organisation copying, and is the copied structure connected to real work or merely displayed; and where does this actor sit in the global system, with what capital and what dependence. These questions train the habit of looking across levels, which is the skill that separates a technician who patches one hole from a manager who understands why the hole keeps reappearing. The same questions also make the sociological lenses concrete, turning #institutional_isomorphism, #field_theory, and #world_systems_theory from abstract names into working tools. The practical implication of these findings is that managers should diagnose before they act. Before buying a tool or launching a campaign, a manager can ask which level the real problem lives on. If it is individual, behavioural levers and habit-building apply. If it is organisational, the question becomes whether adopted structures are connected to daily work or merely ceremonial. If it is structural and global, the answer involves building durable local capital rather than importing tools that fade. Most serious problems, as the analysis showed, live on several levels at once, so the strongest programmes work on all of them together. Conclusion This article set out to bring the scattered theories of #cybersecurity_management into a single, teachable map. It argued that security is not only a technical matter but a human, organisational, and global one, and that no single theory can explain it alone. The map placed #behavioural_theories at the individual level, institutional and socio-technical theories at the organisational level, and world-systems theory at the global level, with Bourdieu's field, habitus, and capital running through all three as a bridge. The contribution is mainly one of integration. Each theory used here already exists, and recent research has begun to apply institutional isomorphism, Bourdieu, and world-systems thinking to digital security. What has been missing is a clear account of how they fit together, especially one written plainly enough for students. By arranging the theories on three levels and showing how the gaps in one level are filled by the next, the article turns a confusing collection into a usable system. The worked example of a breach with causes on every level shows why this matters: a manager armed only with one theory will misread most real incidents. The limits of the work should be stated honestly. It is a conceptual review, so its propositions are arguments to be tested, not results proven by new data. It reflects the author's choices about which literature to include and how to weigh it, and a different reviewer might draw the lines elsewhere. It also simplifies rich theories into short summaries, which is useful for learning but loses detail that advanced study would restore. World-systems theory in particular is debated, and some scholars argue that fast-changing economies blur the neat zones it describes, a caution worth keeping in mind when applying it to the cyber domain. These limits point to future work. The five propositions invite empirical testing, for example by measuring whether habit-building beats one-off training, or whether peripheral organisations show a real gap between certification and protection. Researchers could also study how the levels interact over time, tracing how a global standard becomes a coercive pressure, then an organisational structure, then a shaper of individual habitus. And as new technologies arrive, the framework itself should be tested and revised, since theories earn their keep only by surviving contact with evidence. For students, the closing message is practical. When you face a #security problem, resist the urge to reach at once for a tool or a slogan. Ask first where the problem lives. Look at the individual, the organisation, and the wider system, and notice the habits, the status, and the resources that connect them. Strong #cybersecurity_management is not the act of buying the same controls as everyone else. It is the harder, more rewarding work of matching the right response to the right level, with a clear eye on the people, institutions, and structures that decide whether any control will hold. Hashtags #Cybersecurity_Management #CybersecurityManagementTheories #Cyber_Security_Management_Theory #CybersecurityTheory #InformationSecurityManagement #SecurityManagement #ProtectionMotivationTheory #DeterrenceTheory #TheoryOfPlannedBehaviour #InstitutionalIsomorphism #Bourdieu #WorldSystemsTheory #SocioTechnicalSystems #SecurityBehaviour #CyberRiskManagement References Bourdieu, P. (1986). The forms of capital. In J. G. Richardson (Ed.), Handbook of theory and research for the sociology of education (pp. 241-258). New York: Greenwood Press. Bourdieu, P., and Wacquant, L. (1992). An invitation to reflexive sociology. Chicago: University of Chicago Press. Burns, A. J., Roberts, T. L., Posey, C., Lowry, P. B., and Fuller, B. (2023). Going beyond deterrence: A middle-range theory of motives and controls for insider computer abuse. Information Systems Research, 34(1), 342-362. Demir, N., Bottger, C., Hosseini, H., Demir, M., Wressnegger, C., Pohlmann, N., and Urban, T. (2026). Four decades of security and privacy research: Evolution of topics, impact, and the community. Journal of Cybersecurity, 12(1), tyag007. https://doi.org/10.1093/cybsec/tyag007 DiMaggio, P. J., and Powell, W. W. (1983). The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields. American Sociological Review, 48(2), 147-160. Haag, S., Siponen, M., and Liu, F. (2021). Protection motivation theory in information systems security research: A review of the past and a road map for the future. The DATA BASE for Advances in Information Systems, 52(2), 25-67. International Organization for Standardization. (2022). ISO/IEC 27001:2022. Information security, cybersecurity and privacy protection. Information security management systems. Requirements. Geneva: ISO. Jeyaraj, A., and Zadeh, A. (2020). Institutional isomorphism in organizational cybersecurity: A text analytics approach. Journal of Organizational Computing and Electronic Commerce, 30(4), 361-380. https://doi.org/10.1080/10919392.2020.1776033 Jeyaraj, A., and Zadeh, A. (2022). Exploration and exploitation in organizational cybersecurity. Journal of Computer Information Systems, 62(4), 680-693. Meyer, J. W., and Rowan, B. (1977). Institutionalized organizations: Formal structure as myth and ceremony. American Journal of Sociology, 83(2), 340-363. Rogers, R. W. (1975). A protection motivation theory of fear appeals and attitude change. The Journal of Psychology, 91(1), 93-114. Scott, W. R. (2014). Institutions and organizations: Ideas, interests, and identities (4th ed.). Thousand Oaks: Sage. Wallerstein, I. (2004). World-systems analysis: An introduction. Durham: Duke University Press.

Information technology projects are usually explained through technical and managerial models, yet these models rarely ask why the field behaves the way it does. This article reviews and reinterprets the main theories of #IT_project_management and then reads them through three social science lenses: Pierre Bourdieu's theory of practice, the theory of #institutional_isomorphism developed by DiMaggio and Powell, and Immanuel Wallerstein's world systems theory. The aim is to give students a clear map of how the field thinks about itself, and a sharper set of tools for asking harder questions. Using an integrative literature review of recent peer reviewed studies, most of them published in the last five years, together with the foundational works that define each theory, the study organises the evidence into three themes. First, IT project work operates as a Bourdieusian #field in which certifications, methods, and reputation act as forms of #cultural_capital and #symbolic_capital that decide who is treated as a competent project manager. Second, the rapid spread of methods such as #agile, scrum, and stage gate governance is only partly explained by performance; much of it reflects pressure to look legitimate, which is the central claim of institutional theory. Third, the way IT projects are split across countries, with design and decision rights in wealthy economies and lower paid delivery work elsewhere, mirrors the #core_periphery structure that world systems analysis describes. The findings suggest that project success is shaped as much by social position, imitation, and global hierarchy as by planning quality. The article closes with implications for teaching, research, and reflective practice, arguing that a sociological reading does not replace technical knowledge but completes it. Keywords: IT project management; project management theory; Bourdieu; field and capital; institutional isomorphism; world systems theory; agile; contingency theory; global software development; project governance 1. Introduction Most students meet project management as a set of tools. They learn how to draw a work breakdown structure, how to build a schedule, how to estimate cost, and how to track risk. In the information technology setting these tools sit on top of software practices such as iterative delivery, version control, and continuous testing. This toolbox is useful, and no serious account of the field can ignore it. The problem is that the toolbox answers a narrow question. It tells us how to run a project once the goals, the team, the budget, and the method have already been chosen. It says far less about why those choices were made, why some methods spread while others fade, and why two organisations facing very similar problems often end up with very different results. Consider a familiar scene. A large organisation announces that it will replace an ageing system. It hires a certified manager, adopts the method that everyone in its sector seems to be adopting, sets up a steering committee, and sends much of the build work to a delivery centre in another country. Eighteen months later the project is late, the budget has grown, and the people involved are blaming one another. A purely technical review will look at the schedule, the estimates, and the change requests. It may well find genuine planning errors. But it will probably miss the deeper questions. Why was that particular manager trusted with authority? Why was that method chosen when it did not fit the organisation's culture? Why was the delivery work placed where it was, and who really controlled the important decisions? These questions are not technical. They are social, political, and structural, and the standard toolbox is not built to answer them. This article starts from that gap. The literature on #IT_project_management is rich in models but thin in social theory. Reviews of the field repeatedly produce long lists of #critical_success_factors, yet they also report that the rate of troubled and failed projects has stayed stubbornly high for decades (Schmidt, 2023). When the same factors are named again and again, and the same failures keep happening, it is worth asking whether the usual explanations are incomplete. The argument here is that the missing part is not more technique. It is a way of seeing the human and structural forces that surround every project. To explore that idea, the article does two things. It first sets out the mainstream theory base that students are expected to know, including the #iron_triangle of scope, time, and cost, the staged project lifecycle, the rise of #agile methods, and contingency theory, which holds that the right approach depends on the situation. It then brings in three theories from sociology and political economy that are rarely taught in technical project courses but that explain a great deal once they are applied. The first is the practice theory of Pierre Bourdieu, built around the linked ideas of #habitus, #field, and capital. The second is the theory of #institutional_isomorphism, which explains why organisations in the same field tend to look more and more alike over time. The third is #world_systems_theory, which describes the global economy as a single system split into a wealthy core, a poorer periphery, and a semi periphery in between. The choice of these three lenses is deliberate. Each one targets a level of analysis that the standard toolbox neglects. Bourdieu works at the level of the person and the profession, and helps explain who gets recognised as a skilled project manager and why. Institutional theory works at the level of the organisation, and helps explain why a particular method becomes the expected way of working even when the evidence for it is mixed. World systems theory works at the level of the planet, and helps explain how the daily reality of a software project, with teams spread across several countries, fits into a much older pattern of unequal exchange. Together they move the analysis from the surface of the project down through three deeper layers. The article is written for students, so the language is kept plain and the theory is introduced step by step. At the same time it follows the structure expected of a research paper, moving from a theoretical framework through a stated method to analysis, findings, and conclusions. The contribution is not a new dataset. It is a synthesis. The article gathers recent evidence about how IT projects actually run, then reorganises that evidence around three explanatory frames so that readers can see patterns that single discipline accounts tend to miss. It does not claim that the social reading is more correct than the technical reading. It claims that the two together are far stronger than either alone. Three questions guide the work. How well do the dominant theories of IT project management explain what we observe in practice? What do Bourdieu, institutional theory, and world systems analysis add to that picture? And what would change in teaching and research if these lenses were treated as core rather than optional? The sections that follow take up each question in turn. Section 2 builds the theoretical framework, Section 3 sets out the method, Section 4 applies the lenses to the evidence, Section 5 distils the findings, and Section 6 draws conclusions for practice, research, and education. 2. Background and Theoretical Framework 2.1 The mainstream theory base The first body of theory is practical and prescriptive. It tells practitioners what to do. At its centre sits the idea that a project is a temporary effort to create a defined result within limits of scope, time, and cost. The familiar #iron_triangle captures these limits and warns that a change to one corner forces a change in the others; if scope grows but the deadline stays fixed, either cost rises or quality falls. Around this core sit the process groups and knowledge areas codified by professional bodies, most visibly in the Project Management Institute's body of knowledge, which moved in its seventh edition toward a principle based and outcome based view rather than a single fixed sequence of steps (Project Management Institute, 2021). The traditional, plan first style is often called #waterfall because work flows in sequence from requirements through design, build, test, and release. It assumes that requirements can be known well enough in advance to be locked down before construction begins. That assumption proved fragile in software, where requirements shift as users see early versions and as markets move. A second strand grew out of this problem. #Agile methods, and especially scrum, replaced long sequential plans with short cycles, frequent feedback, and close contact with the customer. They value working software, collaboration, and adaptability over heavy documentation and rigid plans. Recent systematic reviews show that agile thinking has spread well beyond its origins in software and is now applied, sometimes awkwardly, to many kinds of projects, and that the field still lacks a single agreed definition of what agile project management even means (Dong et al., 2024). Reviews also show that adoption is uneven and that the move to agile creates real friction inside organisations, including clashes between flexible team practices and the rigid governance, budgeting, and reporting that larger firms expect (Anifa et al., 2024; Maharao, 2024). Because pure agile and pure plan based working both have weaknesses, many organisations now run #hybrid_methodology arrangements that combine elements of each, and scaling frameworks attempt to apply agile ideas across large programmes with many teams (Almeida and Balint, 2024; Daraojimba et al., 2024). A third strand is more analytical and is the closest the mainstream comes to genuine theory. Contingency theory rejects the search for one best method and argues instead that the right approach depends on the nature of the work and its environment. Applied to software, this view holds that the fit between project characteristics, the chosen method, and the surrounding organisation is what drives results. The contingency fit model of #critical_success_factors organised dozens of named factors into organisational, team, and customer groups, and argued that their effect on project success depends on context rather than being fixed once and for all (Ahimbisibwe et al., 2015). The same logic appears whenever scholars sort projects by novelty, technology, complexity, and pace, and then argue that different profiles need different management. Later work has extended this thinking, for example by studying how a shift to remote and hybrid working changed which factors mattered most in scrum based teams (Chakravorty et al., 2024), and by examining how risks should be ranked and managed inside fast moving agile projects (Charles, 2024). Studies of disruption, including the rapid move to distributed work during the pandemic, reinforced the same lesson, namely that method and context cannot be separated, and that what works in a stable setting may fail in a turbulent one (Sharma et al., 2022; Weichbroth, 2022). Alongside these strands sit several supporting ideas that students will recognise. Stakeholder thinking stresses that a project serves many parties whose interests differ and sometimes conflict, so that managing expectations is as important as managing tasks. Governance models describe how decisions are authorised, how money is released in stages, and how senior sponsors hold a project to account. Benefits realisation reminds everyone that delivering an output on time is not the same as delivering value, since a system can be built exactly as specified and still fail to help the organisation. Risk management treats uncertainty as something to be identified, assessed, and controlled. Each of these ideas is valuable, and any competent practitioner needs them. Running through much of this literature is a quiet anxiety about failure. For decades, industry surveys and academic studies have reported that a large share of IT projects finish late, cost more than planned, or fail to deliver the value that was promised, and that a meaningful number are abandoned before completion (Schmidt, 2023). The response within the mainstream tradition has been to refine the tools: better estimation, clearer requirements, tighter governance, more disciplined risk management, and more responsive methods. These refinements have real merit, and some failures clearly do come from weak planning or poor execution. Yet the persistence of the pattern, across changing technologies and changing methods, hints that the explanation may not lie entirely inside the toolbox. A method that is technically sound can still be adopted for the wrong reasons, led by the wrong person for reasons that have little to do with skill, and delivered through an arrangement that no one in the room fully controls. That possibility is exactly what the social theories in the rest of this section are designed to examine. The mainstream base is therefore strong on description and advice. Its limit is that it tends to treat the social setting as background noise. It assumes that organisations choose methods mainly to improve performance, that competence can be measured fairly directly, and that the global structure of the work is simply a cost decision to be optimised. The three theories below challenge each of those assumptions in turn. They do not say the mainstream is wrong. They say it is incomplete in ways that matter. 2.2 Bourdieu: field, habitus, and capital Pierre Bourdieu offered a way to study social life that refuses to choose between the free individual and the all determining structure. His central concepts are #field, #habitus, and capital (Bourdieu, 1977, 1990). A field is a structured social arena with its own rules, its own stakes, and its own hierarchy of positions. People inside a field compete for position, and what counts as a winning move is defined by the field itself rather than by some neutral standard. A football field, an art world, a university, and a profession are all fields in this sense, each with its own logic. #Habitus is the set of dispositions, tastes, and habitual ways of acting that a person absorbs through long experience, often without noticing. It is the feel for the game that lets an experienced player act well and quickly without consulting a rulebook, because the rules have become second nature. Habitus is durable but not fixed; it is shaped by where a person has come from and by the positions they have held. It explains why people from similar backgrounds often share similar reactions, and why someone can seem to belong, or not belong, in a setting before they have said a word. Capital, in Bourdieu's sense, is any resource that has value inside a field. He identified several kinds. #Economic_capital is money and material assets. #Cultural_capital is knowledge, skills, credentials, qualifications, and refined judgement, and it exists in three states: embodied as long lasting dispositions, objectified in cultural goods, and institutionalised in the form of certificates and titles. #Social_capital is the value of one's network of useful relationships and the trust that flows through them. When any of these forms is widely recognised as legitimate and prestigious, it is transformed into #symbolic_capital, which Bourdieu regarded as the most powerful kind precisely because it does not look like capital at all; it looks like natural authority, talent, or merit, and so its social origins are hidden. Bourdieu's tools have been applied directly to project work. A study of experienced project managers used his framework to show that successful managers share a set of social characteristics and that the role should be understood sociologically and not only technically (Kalogeropoulos et al., 2020). The argument is that a manager's authority does not come only from method knowledge. It comes from a habitus, formed through years of practice, that lets the person read a room, judge what can safely be said to a sponsor, sense when a plan is about to slip, and carry themselves in a way that others accept as authoritative. This is why two managers holding identical certificates can perform very differently, and why the field tends to reward people who already fit its unspoken norms of how a serious professional looks and behaves. For the present article, the value of Bourdieu is that he turns competence into a social fact rather than a fixed property held inside a single head. A #certification, a method credential, or a record of delivering large systems is not only a skill. It is also a token of #cultural_capital in its institutionalised form, which the field reads as a signal of belonging and seriousness. The concept of doxa, the taken for granted beliefs that members of a field rarely question, is equally important. In IT project management, the belief that more planning, more measurement, or more agility automatically equals better work can function as #doxa, accepted without proof because it is what serious members are supposed to believe. Bourdieu also insisted on reflexivity, the discipline of turning the analytical gaze back on oneself and one's own position. A reflexive practitioner asks not only what the project needs but also how their own background shapes what they notice, trust, and overlook. 2.3 Institutional isomorphism The second lens shifts attention from the person to the organisation. DiMaggio and Powell asked a sharp question: why do organisations that operate in the same area grow more similar over time, even when there is no clear performance reason for them to converge (DiMaggio and Powell, 1983)? Their answer was #institutional_isomorphism, a process that pushes organisations in a shared field toward a common shape. The starting point is the organizational field, meaning the set of organisations that, taken together, make up a recognised area of life, including suppliers, customers, regulators, and competitors. Once such a field becomes well established, the authors argued, there is a strong pull toward homogenisation. They described three mechanisms. #Coercive_isomorphism comes from outside pressure, such as laws, regulations, contracts, and the demands of powerful partners or funders on whom an organisation depends. When a rule or a contract requires a particular structure or practice, organisations adopt it whether or not it improves their work. #Mimetic_isomorphism comes from uncertainty. When managers do not know what will work, and goals or technologies are unclear, they copy organisations they regard as successful or legitimate, because imitation feels safer than invention. #Normative_isomorphism comes from professionalization, that is, from shared university training, common certificates, and professional associations that spread a single idea of correct practice and define who counts as a qualified member. The link to IT project management is direct and easy to see. Consider why an organisation adopts a particular method or governance model. A client or a regulator may require a recognised framework before awarding a contract, which is coercive pressure. A firm that is unsure how to manage digital work may copy the methods used by admired technology companies, reasoning that what works for the leaders should work for it too, which is mimetic pressure. And the steady stream of certified professionals, trained to value the same practices and to speak the same vocabulary, spreads a common template wherever those professionals are hired, which is normative pressure. Institutional theory predicts that, under these forces, methods spread because they confer #legitimacy, meaning that adopting them makes an organisation look proper, modern, and trustworthy, and not only because they raise output. This helps explain a puzzle that the contingency view cannot fully resolve. If fit were the only thing that mattered, organisations facing different situations would choose different methods. Instead we often see a single method sweep across an entire sector at once. A crucial refinement here is the idea of decoupling, sometimes called ceremonial adoption. Organisations may adopt the visible signs of a method, such as stand up meetings, sprint boards, and the right job titles, while their real decision making continues much as before. They gain the legitimacy of looking agile without paying the full cost of changing how they actually work. Recent reviews that document the uneven, sometimes ritualistic spread of agile across very different settings are consistent with this reading (Dong et al., 2024; Anifa et al., 2024). #Standardization through bodies of knowledge can be understood in the same double way, as both a genuine effort to share good practice and a source of #normative_isomorphism that pushes the whole field toward a single model of the legitimate project (Project Management Institute, 2021). DiMaggio and Powell called the result an iron cage, because once a field settles on a dominant template it becomes very hard for any single organisation to escape it. 2.4 World systems theory The third lens is the widest. Immanuel Wallerstein argued that, since the rise of capitalism, the world has functioned as a single economic system bound together by a global division of labour, rather than as a set of separate national economies each developing on its own path (Wallerstein, 2004). The proper unit of analysis, in this view, is the world system as a whole, not the individual country. This system is divided into three zones connected by unequal exchange. The core consists of wealthy economies that control finance, advanced technology, and high value, high skill work. The periphery supplies cheaper labour and lower value work and captures only a small share of the value that is created. The #semi_periphery sits between the two, mixing some advanced activity with continued dependence on the core, and serving as a kind of buffer. Wallerstein's key and most challenging claim is that the relative poverty of peripheral regions is not simply a starting point that they will naturally grow out of by following the same path the core once took. It is a condition produced and reproduced by their position within the system. Value flows from periphery to core through unequal exchange, profits are often repatriated rather than reinvested locally, and skilled people are drawn toward the core, a pattern sometimes called brain drain. Movement between zones is possible, and some economies have climbed, but the structure as a whole keeps reproducing the gap, because the system needs lower cost zones for it to function as it does. This may seem distant from a software project, but it is not. Modern IT delivery is global. Design, architecture, product ownership, and client facing roles often sit in #core economies, while a large share of coding, testing, maintenance, and support is carried out through offshoring and outsourcing arrangements in lower cost regions. Research on digital platforms and digital labour shows in detail how value is produced and distributed unevenly across this geography, with lead firms in wealthy economies coordinating the network, setting the terms, and capturing the larger share of value, while pushing cost and insecurity outward to workers in poorer regions (Howson et al., 2022). World systems theory frames the everyday decision to send delivery work to a distant team not as a neutral efficiency choice but as one small expression of a durable global division of labour. It also reframes #knowledge_transfer, a routine project concern, as a flow that tends to keep the most valued knowledge and the most important decisions in the core, so that peripheral teams can gain experience while remaining structurally dependent. India is the classic example of a semi peripheral ascent in software, having built a vast, sophisticated technology services sector, yet much of the highest value design and ownership of the largest platforms still concentrates elsewhere, which shows both the possibility and the limits of movement within the system. 2.5 Why three lenses together These theories are not rivals competing to be the single true account. They describe different levels of the same reality. Bourdieu explains the contest for position among individuals and professions, and so works at the human scale. Institutional theory explains why organisations in a shared field converge on common models, and so works at the organisational scale. World systems theory explains how the work itself is arranged across the globe, and so works at the planetary scale. Read together, they suggest that an IT project is never merely a plan being executed. It is a small node where personal #power, organisational #legitimacy, and global #core_periphery structure all meet at once. The method section explains how the article brings these strands into contact with the evidence in a disciplined way. 3. Method This is a conceptual study based on an integrative literature review. An integrative review is the appropriate design when the goal is to bring together work from different traditions, including empirical studies and theoretical writing, and to build a fresh synthesis rather than to count results or pool statistics. Because the article asks how well existing theories explain practice, and what additional theories can add, a purely numerical review would not have answered the questions. The method therefore combines a structured search for recent evidence with a careful return to the foundational texts that define each theoretical lens. The search had two streams that ran in parallel. The first stream looked for recent peer reviewed work on the theory and practice of #IT_project_management, with priority given to studies published within roughly the last five years so that the picture of practice would be current. Searches combined terms such as IT project management, agile, hybrid project management, contingency theory, critical success factors, project governance, software project failure, and global software development. The aim was to capture present thinking about how IT projects are run and why they succeed or fail. The second stream looked for the original and most cited statements of the three social theories, namely Bourdieu's writing on practice and capital, the institutional isomorphism argument of DiMaggio and Powell, and Wallerstein's world systems analysis, together with recent studies that apply these ideas to project work, organisations, and the digital economy. Sources were included when they were peer reviewed, or were canonical books and articles that define a theory, when they were relevant either to the practice of IT projects or to one of the three lenses, and when they were available in English. Foundational theory texts were retained even where they are older than five years, because a review of a theory must cite the theory itself; the work of Bourdieu, of DiMaggio and Powell, and of Wallerstein cannot be replaced by newer commentary without losing precision. For the contemporary evidence base, however, recent sources were strongly preferred. Sources were excluded when they were promotional rather than scholarly, when their claims could not be checked against the original, or when they merely repeated material already covered more rigorously by a stronger study. Analysis followed a thematic logic in four steps. First, the recent evidence on IT project practice was read closely and coded into recurring concerns, such as the spread and uneven fit of methods, the recognition and reward of competence, the role of governance and standards, the persistence of failure, and the global organisation of delivery work. Second, each cluster of concerns was mapped against the three theoretical lenses to see which lens explained it most powerfully, and where more than one lens applied. Third, this mapping produced three analytical themes, which are presented in the next section: IT project management as a field of practice, methodology adoption as institutional behaviour, and global delivery as a world system. Fourth, the analysis examined how the three lenses connect, since the article argues that their real strength lies in being used together rather than separately. Two limits should be stated plainly so that readers can weigh the claims fairly. First, the study does not present new primary data; its claims are interpretive and are offered as a framework for further empirical testing, not as proof. Where the article proposes a relationship, such as a link between recognised capital and perceived competence, it does so as a proposition that future research could examine. Second, applying broad social theories to a specific field always carries the risk of oversimplifying both the theory and the practice. A concept such as capital or isomorphism is far richer in its original setting than any short application can convey. To reduce this risk, the analysis stays close to the cited evidence, names the theory it is drawing on at each step, and avoids stretching any single concept beyond what the literature can support. A short word on the spirit of the review is also in order, since Bourdieu himself insisted that researchers examine their own position. This article is written from within the broad tradition of management and information systems scholarship, and it is sympathetic to the view that social structure matters. That sympathy could lead a reader to find structure everywhere, including where simpler technical explanations would do. The remedy is not to pretend to have no viewpoint, which is impossible, but to be open about it and to let the cited evidence, rather than the chosen theories, decide how far each claim can travel. Where the mainstream technical account is sufficient, the article says so, and it treats the social lenses as additions to that account rather than as replacements for it. 4. Analysis 4.1 IT project management as a field of practice Reading the literature through Bourdieu reframes a debate that has run for decades. The field spends a great deal of energy on #critical_success_factors and on the question of which method works best. Yet reviews keep returning long, overlapping lists, and they keep reporting that the same factors and the same failures recur across very different settings and across many years (Schmidt, 2023; Ahimbisibwe et al., 2015). A Bourdieusian reading suggests one reason for this strange persistence. Much of what these lists measure is not raw technique but the social recognition of technique. A factor such as senior management support, which appears in almost every list, is partly a question of whether the project manager has the #social_capital and #symbolic_capital to command attention and resources at the top of the organisation. Communication, another perennial factor, depends on a #habitus that lets a manager pitch the same message in the right register to engineers, to sponsors, and to anxious users, reading each audience and adjusting without conscious effort. The direct application of Bourdieu to project managers supports this reading. The finding that successful managers share social characteristics, and that the role is best understood sociologically, implies that the field rewards a particular feel for the game and not only documented skill (Kalogeropoulos et al., 2020). This has real consequences for how competence is judged and rewarded. A #certification or a record of delivering a well known system functions as #cultural_capital in its institutionalised form, which the field reads as proof of belonging, which is why credentials can open doors even where they predict actual performance only weakly. There is, in effect, a certification economy in which qualifications circulate as tokens of seriousness. This also explains a quieter form of exclusion that purely technical accounts miss entirely. People whose background did not equip them with the expected dispositions may be fully capable yet still be read as not quite fitting, because the field's standard of the legitimate manager is unspoken, embodied, and absorbed rather than written down anywhere. Questions of class, gender, accent, and educational background can therefore shape careers in project work without ever appearing in a competency framework. The notion of #doxa sharpens the point further. When the belief that more process, more documentation, or more agility is always better becomes doxa, it is treated as obvious and is rarely tested against results. Practitioners who question it can appear naive or unserious, which protects the belief from challenge. A reflexive practitioner, by contrast, would ask why a given practice is assumed to be good, whose interests it serves, and whether the evidence actually supports it in the case at hand. Bourdieu's framework does not tell managers to abandon method or credentials. It asks them to see these things clearly, as forms of capital with social effects, rather than as neutral measures of worth. 4.2 Methodology adoption as institutional behaviour The spread of methods is the clearest place to watch institutional_isomorphism at work. The contingency view says that organisations should choose the method that fits their particular situation, matching approach to the novelty, complexity, and pace of the work (Ahimbisibwe et al., 2015; Chakravorty et al., 2024). The evidence shows something more complicated and more interesting. #Agile spread far beyond the contexts it was designed for, was adopted in settings where it fit poorly, and frequently collided with the existing governance, budgeting, and reporting systems of the organisations that took it up (Dong et al., 2024; Anifa et al., 2024; Maharao, 2024). If fit were the only driver, a single approach would not sweep across so many different organisations at roughly the same time. Something other than pure contextual matching is clearly at work. The three institutional mechanisms account for the pattern without difficulty. #Coercive_isomorphism appears when clients, regulators, or funding bodies require a recognised framework or a named method before they will engage, so that organisations adopt the model to win and keep work rather than to improve it. #Mimetic_isomorphism appears under genuine uncertainty, when managers facing hard to judge digital problems copy the practices of admired technology firms on the reasonable assumption that imitation is safer than improvisation. #Normative_isomorphism appears through professionalization, as training courses, certificates, conferences, and professional bodies turn out practitioners who all carry the same template of correct practice and who then reproduce that template wherever they are employed (Project Management Institute, 2021). The shared result is that methods are adopted partly to secure #legitimacy, that is, to be seen as a modern, well governed organisation that does things the proper way. This is not a cynical observation. Legitimacy is a genuine and valuable resource; it helps win contracts, attract and retain skilled staff, reassure boards and auditors, and calm nervous clients. But the institutional reading carries a serious practical lesson: the popularity of a method is weak evidence that it suits any given organisation. The phenomenon of decoupling makes this sharper still. An organisation can adopt the visible ceremonies of a method, the boards, the stand ups, the renamed roles, while its real authority and decision making continue much as before, gaining the appearance of agility without its substance. What looks like transformation can be theatre. This pattern fits the uneven and often disappointing results that reviews keep reporting, and it explains the appeal of #hybrid_methodology and scaling frameworks, which let an organisation display the legitimate signals of agility while keeping the control structures that funders and regulators still expect (Almeida and Balint, 2024). Contingency theory remains valuable precisely because it pushes back against this institutional pull toward one fashionable model, reminding practitioners to ask whether the method actually fits before they adopt it. 4.3 Global delivery as a world system The third theme moves from the organisation outward to the planet. A large IT project today is rarely built in a single place. Requirements, architecture, and product ownership often sit with a team in a wealthy #core economy, while a substantial share of coding, testing, maintenance, and around the clock support is carried out through offshoring and outsourcing in lower cost regions, sometimes in a follow the sun model that passes work between time zones. The standard explanation for this arrangement is cost efficiency, and cost is certainly part of the story. #World_systems_theory offers a deeper reading. The arrangement reproduces a global division of labour in which the highest value and most strategic work concentrates in the core, while more routine and lower paid work flows to the periphery and the semi periphery (Wallerstein, 2004). Research on the digital economy gives this framing empirical support. Studies of platform mediated work and digital labour show that lead firms in wealthy economies coordinate global networks, set the terms of engagement, and externalise cost and risk to workers elsewhere, capturing the larger share of value while shifting insecurity outward (Howson et al., 2022). Within a single project this dynamic is easy to miss, because at the level of a staffing plan it simply looks like a sensible cost decision. World systems theory makes the larger pattern visible. It reframes #knowledge_transfer, a routine and apparently benign project activity, as a flow that tends to keep the most valued knowledge and the key decision rights in the core, so that peripheral teams remain dependent even as they accumulate experience and skill. It reframes the daily friction of distributed projects, such as time zone strain, communication overhead, and the uneven authority that remote teams hold over design choices, not as accidents of distance but as features of a hierarchical arrangement in which some sit closer to power than others. None of this denies that offshoring and global delivery can bring real benefits to peripheral and semi peripheral regions, including skills development, rising incomes, and the growth of strong local firms. The ascent of major software service economies shows that movement within the system is genuinely possible. The point of the world systems reading is more careful than a simple condemnation. It is that the structure tends to limit how far that advancement goes, because the system continually reproduces the gap between zones through unequal exchange, the concentration of ownership and decision rights in the core, and the steady pull of the most skilled people toward the centre. Recognising this does not require a manager to refuse all global delivery. It requires them to see the structure honestly and to consider questions of fairness, dependency, and long term capability that a pure cost calculation hides. There is also a capability dimension that connects back to the organisation. When a firm in the core treats peripheral teams purely as a source of cheap hands to execute instructions, it tends to keep design thinking, architectural judgement, and customer understanding at the centre. Over time this can hollow out the periphery's chance to grow into higher value work, but it can also leave the core dependent on a stream of detailed coordination that it cannot easily reduce. The relationship becomes locked in on both sides. By contrast, arrangements that deliberately share design responsibility, rotate staff, and build genuine local ownership can shift the balance, though they run against the grain of the system and so require conscious effort to sustain. World systems theory does not provide a simple formula for managing distributed teams. What it provides is a reason to expect that the default arrangement will reproduce inequality unless someone actively decides otherwise, and a vocabulary for naming that pattern when it appears in an ordinary project plan. 4.4 How the three lenses interlock The strongest insight comes from holding the three readings together rather than using them one at a time. Imagine a single project. A bank in a core economy decides to rebuild its payment system. It chooses a fashionable agile at scale framework, partly because a regulator and several large partners now expect it, and partly because its main rivals have already done the same; this is institutional_isomorphism producing legitimacy. It appoints a project manager whose authority rests on a long delivery record and the right set of credentials, which the organisation reads as symbolic_capital and accepts as natural fitness for the role; this is Bourdieu's field deciding who counts as competent. It then sends much of the build and test work to teams in a peripheral region while keeping architecture, product ownership, and client contact at headquarters; this is the #core_periphery structure of the world system reproducing itself inside one company's project plan. Each lens explains a different layer of the same set of decisions, and none of the three could explain the whole on its own. A second example shows the same interlock from another angle. A public agency commissions a new citizen facing service. It is required by procurement rules to use an approved supplier and an approved framework, which is coercive pressure. The chosen supplier staffs the work with certified professionals who bring a shared template of correct practice, which is normative pressure, and who carry the dispositions and bearing that the field recognises as professional, which is habitus and capital. The lower level development is offshored to keep the price within the public budget, which places the agency, perhaps without anyone intending it, inside the global division of labour. When the project struggles, the official review examines the schedule and the requirements. The deeper forces, the imitation, the politics of recognition, and the global hierarchy, remain invisible to a purely technical lens. The mainstream toolbox describes only the plan sitting on top of all this. The analysis here suggests that what the toolbox treats as the whole project is really the visible tip of a much deeper social arrangement, and that better outcomes may depend on seeing the part below the surface. 5. Findings The analysis yields several findings, stated here as clear propositions for students and as starting points for future research. First, project success in IT is socially produced as much as it is technically produced. The recurring lists of critical_success_factors capture real and important concerns, but many of those factors, including management support, communication, and stakeholder engagement, depend heavily on the social position and habitus of the people involved rather than on documented technique alone (Kalogeropoulos et al., 2020; Ahimbisibwe et al., 2015). This matters because a purely technical reading of success will keep missing the social half of the picture, which may help explain why decades of ever longer factor lists have not lowered failure rates in any clear way (Schmidt, 2023). If the social dimension is doing much of the work, then measuring only the technical dimension will always leave the results looking puzzling. Second, competence in the field is partly a matter of recognised capital. A #certification or a strong delivery record functions as #cultural_capital and, once it becomes prestigious, as symbolic_capital that the field reads as belonging and fitness for authority. This raises a fairness question that the profession should face openly. If recognition tracks the absorbed feel for the game more closely than it tracks measured skill, then capable people from outside the expected background may be systematically undervalued, and the field's working idea of the legitimate manager deserves honest scrutiny rather than being protected as #doxa. The practical implication is that organisations should examine how they actually decide whom to trust with project authority, and whether those decisions reward signals of belonging more than evidence of capability. Third, method choice is driven by legitimacy as well as by fit. The wide and uneven spread of #agile, the friction it creates with existing governance, the prevalence of ceremonial or decoupled adoption, and the rise of #hybrid_methodology and scaling frameworks are all well explained by coercive, mimetic, and #normative_isomorphism (DiMaggio and Powell, 1983; Dong et al., 2024; Anifa et al., 2024). The clear practical lesson is that the popularity of a method is weak evidence that it suits a given organisation, and that adopting a method to look modern is not the same as adopting it to work better. Contingency theory remains valuable precisely because it resists the institutional pull toward one fashionable model and insists on matching approach to context (Chakravorty et al., 2024; Charles, 2024). Fourth, the global organisation of IT delivery reflects a core_periphery hierarchy. Offshoring and outsourcing decisions are usually justified by cost, but world systems theory and research on digital labour show that they also reproduce an unequal global division of labour in which the core retains the highest value work and the key decision rights (Wallerstein, 2004; Howson et al., 2022). Even routine project activities such as #knowledge_transfer can quietly maintain this gap by keeping the most valued understanding close to the centre. Recognising the structure allows managers to make global delivery choices more deliberately and to weigh fairness and long term capability alongside immediate cost. Fifth, and most important, the three lenses are complementary rather than competing. The same project can be read at the level of the person through Bourdieu, the level of the organisation through institutional theory, and the level of the world through world systems theory, and the fullest understanding comes from using all three together rather than choosing only one. The mainstream toolbox describes the visible surface of a project; the sociological lenses describe the structure beneath it. A student who learns only the surface will be repeatedly surprised by forces they were never taught to see. A further, cross cutting finding concerns how success itself is defined. Project success is not a single objective fact. Different stakeholders judge it differently, and the power to define what counts as success, on time, on budget, or genuinely useful, is itself unevenly distributed. Whoever controls the definition of success controls a large part of the story that gets told afterward. This is a political matter that connects all three lenses, since the authority to define success rests on personal standing, organisational position, and place within the wider system. A final observation concerns teaching. Project management is often taught as a neutral technical craft, a set of tools to be mastered and applied. The evidence reviewed here suggests that this framing is incomplete and can leave graduates genuinely surprised when real projects behave in political and structural ways that no schedule predicts and no risk register captures. Adding even a basic component of social theory to project education would give students a vocabulary and a set of expectations that match what they will actually encounter in working life. 6. Conclusion This article set out to map the theories that shape #IT_project_management and to test them against three social science lenses. The mainstream theory base, built around the #iron_triangle, the staged lifecycle, #agile methods, and contingency theory, remains essential. It is the language practitioners use, the foundation that any student must learn, and the source of genuinely useful advice about planning, estimating, and controlling work. But on its own it explains the how of projects far better than the why. It struggles to account for the long persistence of failure despite ever more detailed guidance, for the social basis of competence, for the fashion driven spread of methods that do not always fit, and for the global pattern of who does which work and who keeps the most valuable parts of it. Bringing in Bourdieu, institutional theory, and world systems analysis fills those gaps in a coordinated way. Bourdieu shows that a project manager's authority rests on habitus and recognised capital, so that competence is a social judgement and not only a technical fact, and that the field's standards of the legitimate professional deserve reflexive examination. DiMaggio and Powell show that organisations adopt methods partly to secure legitimacy, which is why a method can spread across an entire sector without fitting well anywhere in particular, and why visible ceremony can substitute for real change. Wallerstein shows that the everyday geography of IT delivery reproduces a core_periphery hierarchy that older efficiency arguments leave invisible, and that knowledge and decision rights tend to stay near the centre. Read together, the three lenses reveal an IT project as a meeting point of personal power, organisational legitimacy, and global structure, with the technical plan resting on top of all three. The implications fall into three areas. For practice, the central message is reflexivity. Managers who can see the social forces around them, including the pull toward imitation, the politics of recognition, and the hierarchy of global delivery, are better placed to make deliberate, defensible choices rather than to drift with fashion or to mistake ceremony for progress. A reflexive manager still uses the toolbox, but uses it with open eyes. For research, the article offers testable propositions: that recognised capital predicts perceived competence beyond measured skill; that institutional pressure predicts method adoption beyond contextual fit; and that core_periphery position predicts how value and decision rights are distributed within global projects. Each of these could be examined with surveys, comparative case studies, interviews, or network analysis, and each would move the conversation from assertion toward evidence. For teaching, the recommendation is to treat social theory as part of the core curriculum in project education rather than as an optional extra, so that students enter the field already expecting its human and structural dimensions instead of discovering them by painful surprise. This study has clear limits, and they should be held in view. It is conceptual and interpretive; it relies on a synthesis of existing work rather than on new data; and it applies broad social theories to a specific field, which always carries some risk of simplifying both. Its purpose is not to close questions but to open them, and to hand students a richer set of questions to ask. The central claim is modest and, the author hopes, useful. A sociological reading does not compete with technical knowledge of IT_project_management. It completes it. Students who learn both the toolbox and the theory of the field, the institution, and the world system will understand not only how to run a project but why projects are run the way they are, who is trusted to lead them, which methods become expected, and at whose cost the work is finally done. Hashtags #IT_project_management #project_management_theory #agile #contingency_theory #critical_success_factors #habitus #field #cultural_capital #symbolic_capital #institutional_isomorphism #coercive_isomorphism #normative_isomorphism #world_systems_theory #core_periphery #global_software_development #ITProjectManagement #IT_Project_Management #ITPM #ProjectManagementTheories #ITPMtheory #ProjectGovernance #AgileVsWaterfall #BourdieuInManagement #ProjectFieldTheory #DigitalLabour References Ahimbisibwe, A., Cavana, R. Y., and Daellenbach, U. (2015). A contingency fit model of critical success factors for software development projects: A comparison of agile and traditional plan-based methodologies. Journal of Enterprise Information Management, 28(1), 7-33. Almeida, F., and Balint, B. (2024). Approaches for hybrid scaling of agile in the IT industry: A systematic literature review and research agenda. Information, 15(10), 592. Anifa, M., Ramakrishnan, S., Kabiraj, S., and Joghee, S. (2024). Systematic review of literature on agile approach. https://doi.org/10.1177/09711023241272294 Bourdieu, P. (1977). Outline of a Theory of Practice. Cambridge: Cambridge University Press. Bourdieu, P. (1986). The forms of capital. In J. G. Richardson (Ed.), Handbook of Theory and Research for the Sociology of Education (pp. 241-258). New York: Greenwood Press. Bourdieu, P. (1990). The Logic of Practice. Stanford: Stanford University Press. Chakravorty, G., Ramachandra Reddy, B., and Khan, D. A. (2024). Analysing the quantitative impact of the hybrid work model on critical success factors in scrum-based agile software development. International Journal of System Assurance Engineering and Management, 15(11), 5343-5355. Charles, J. (2024). Prioritisation of risks in agile software projects through an analytic hierarchy process approach. Procedia Computer Science, 233, 713-722. https://doi.org/10.1016/j.procs.2024.03.260 Daraojimba, E. C., Nwasike, C. N., Adegbite, A. O., Ezeigweneme, C. A., and Gidiagba, J. O. (2024). Comprehensive review of agile methodologies in project management. Computer Science and IT Research Journal, 5(1), 190-218. DiMaggio, P. J., and Powell, W. W. (1983). The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields. American Sociological Review, 48(2), 147-160. Dong, H., Dacre, N., Baxter, D., and Ceylan, S. (2024). What is agile project management? Developing a new definition following a systematic literature review. Project Management Journal. https://doi.org/10.1177/87569728241254095 Howson, K., Ferrari, F., Ustek-Spilda, F., Salem, N., Johnston, H., Katta, S., Heeks, R., and Graham, M. (2022). Driving the digital value network: Economic geographies of global platform capitalism. Global Networks, 22, 631-648. https://doi.org/10.1111/glob.12358 Kalogeropoulos, T., Leopoulos, V., Kirytopoulos, K., and Ventoura, Z. (2020). Project-as-practice: Applying Bourdieu's theory of practice on project managers. Project Management Journal, 51(6), 599-615. https://doi.org/10.1177/8756972820913392 Maharao, C. S. (2024). A study on agile project management in IT: Challenges and best practices. ShodhKosh: Journal of Visual and Performing Arts, 5(1), 2165-2175. https://doi.org/10.29121/shodhkosh.v5.i1.2024.2284 Project Management Institute. (2021). A Guide to the Project Management Body of Knowledge (PMBOK Guide), Seventh Edition. Newtown Square: Project Management Institute. Schmidt, J. (2023). Mitigating risk of failure in information technology projects: Causes and mechanisms. Project Leadership and Society, 4, 100097. Sharma, M., Luthra, S., Joshi, S., and Joshi, H. (2022). Challenges to agile project management during the COVID-19 pandemic: An emerging economy perspective. Operations Management Research, 15(1-2), 461-474. Wallerstein, I. (2004). World-Systems Analysis: An Introduction. Durham: Duke University Press. Weichbroth, P. (2022). A case study on implementing agile techniques and practices: Rationale, benefits, barriers and business implications for hardware development. Applied Sciences, 12(17), 8457.

Digital innovation has become one of the most studied subjects in management research, yet much of the work treats it as a problem of strategy, technology, or firm-level capability. This article argues that such a narrow view leaves out the social forces that decide who innovates, who copies, who benefits, and who is left behind. To address this gap, the study reviews recent peer-reviewed literature and reads #digital_innovation through three social theories that are rarely brought together: Pierre Bourdieu's theory of #field, #capital, and #habitus; the theory of #institutional_isomorphism developed by DiMaggio and Powell; and Immanuel Wallerstein's #world_systems_theory. The review follows an integrative and structured approach, drawing mainly on management, information systems, and sociology sources published between 2021 and 2026. The analysis is organized across three connected levels. At the macro level, world-systems theory explains how control over platforms, data, and digital infrastructure keeps wealth flowing toward a small group of core economies. At the meso level, institutional isomorphism explains why so many organizations adopt similar digital practices and why some adopt technology only on the surface. At the micro level, Bourdieu's tools explain how managers and workers convert different forms of capital into #digital_capital, and how this reproduces inequality inside and across firms. The main contribution is a layered framework that links these levels and shows that mainstream capability-based theories, such as the #dynamic_capabilities view, describe the engine of digital change but say little about its direction or its fairness. The article closes with implications for students, managers, and policy, and with a research agenda that treats digital innovation as a social and political process rather than a purely technical one. Keywords: digital innovation; management theory; institutional isomorphism; Bourdieu; world-systems theory; dynamic capabilities; digital capital; inequality 1. Introduction For the past decade, the phrase "digital transformation" has appeared in almost every annual report, government plan, and business school syllabus. Firms are told that they must change or fall behind. New tools such as cloud platforms, big data systems, machine learning, and connected devices are presented as the path to growth. Yet the speed of this change has outrun our understanding of it. We know a great deal about how to build a digital product. We know much less about why whole industries seem to move in the same direction at the same time, why the benefits collect in a few hands, and why some countries set the rules while others simply follow them. This article studies #digital_innovation as a social process, not only a technical one. By digital innovation we mean the use of digital technologies to create new products, services, processes, or business models, together with the new ways of organizing that come with them. This definition is broad on purpose. It allows us to look past the gadget and ask the older questions that #management_theory has always asked: How do organizations behave? Where does power sit? Who wins and who loses? Mainstream research has answered part of this. The literature on #digital_transformation has grown quickly, and recent reviews map its main themes with care (Plekhanov, Franke and Netland, 2023; Rego et al., 2022; Feliciano-Cestero et al., 2023). Much of this work rests on the #dynamic_capabilities view, which explains how firms sense opportunities, seize them, and reconfigure their resources to stay fit for a changing environment (Ellstrom et al., 2022; Kulichyova et al., 2025). This body of work is useful. It tells managers what to do and which routines matter. But it tends to treat the firm as a single actor making rational choices in a neutral world. It rarely asks why the world is shaped the way it is, or why the choices on offer look so similar from one company to the next. These are not small omissions. When every firm in a sector buys the same software from the same vendors and follows the same advice from the same consultants, something larger than individual choice is at work. When the profits of the digital economy pile up in a few cities on a few coasts, while billions of users elsewhere supply the data and the attention that make those profits possible, something larger than firm strategy is at work. And when, inside a single company, the people who can read a dashboard or write a query rise while others with deep practical knowledge are pushed aside, something larger than a skills gap is at work. To see these larger things, we need theories that were built to study structure, power, and inequality. The argument of this paper is simple to state. To understand digital innovation fully, we need to read it at three levels at once. At the level of the whole world economy, we need to see how digital wealth concentrates. At the level of the industry or sector, we need to see why organizations come to resemble one another. At the level of the person and the team, we need to see how skills and dispositions are unevenly shared. Three classic theories speak to these three levels, and they have been refreshed by recent scholarship. World-systems theory speaks to the global level. Institutional isomorphism speaks to the sector or field level. Bourdieu's theory of practice speaks to the individual and group level. Reading them together gives a fuller picture than any single management framework can offer on its own. This integration matters for students for two reasons. First, it shows that theories built for an earlier age still cut to the heart of digital questions, once we update them. The #organizational_field that DiMaggio and Powell described in 1983 now includes platforms and data standards. The #cultural_capital that Bourdieu wrote about in 1986 now includes the ability to code and to read an algorithm. The core and the periphery that Wallerstein traced through trade now run through fiber-optic cables and cloud regions. Second, the integration helps future managers avoid a common trap. It is easy to believe that adopting the latest technology is always a free and rational decision that will pay off. The theories in this article warn that adoption is often driven by pressure to look legitimate, that its rewards are unevenly captured, and that the playing field was never level to begin with. It is worth being clear about what this article is and is not. It is not a rejection of capability-based management research. That research is precise and practical, and the present study builds on it rather than tearing it down. The claim is that the capability view answers one set of questions very well and another set hardly at all, and that the unanswered questions are exactly the ones that decide fairness and direction. Nor is the article a purely critical exercise that offers no way forward. It ends with a framework that managers, policymakers, and students can use, and with concrete suggestions for research. The paper is organized as follows. Section two sets out the theoretical framework, first reviewing how management research has treated digital innovation and then explaining the three social theories and how they apply to digital settings. Section three describes the review method. Section four presents the analysis, organized by level. Section five draws out the findings as a set of connected themes and offers an integrated multi-level model. Section six concludes with implications and a research agenda. The aim throughout is to keep the language plain while keeping the thinking serious. 2. Background and Theoretical Framework 2.1 How management research has framed digital innovation Research on digital innovation grew out of older work on technology and organizations, but it took a distinct shape once scholars noticed that digital technology behaves differently from earlier machines. Digital artifacts are editable, they can be recombined, and they are open to many uses that their makers never planned. A piece of software can be updated overnight, joined to other software, and bent to purposes no designer imagined. This makes digital innovation less predictable and more distributed than the innovation of the industrial era. A firm no longer controls the whole life of its product, because users, partners, and platform owners can all reshape it after launch. Value is created and captured across a web of actors rather than inside the walls of one company. Three streams of management thought dominate the field. The first is the #dynamic_capabilities perspective. It holds that firms survive turbulent change by building higher-order routines that let them sense shifts in the environment, seize the right opportunities, and reconfigure their assets. Recent studies apply this directly to digital settings and identify specific routines, such as scanning across industries for digital signals, sensing the state of one's own infrastructure, developing a digital strategy, and rebuilding a shared digital foundation (Ellstrom et al., 2022). A systematic review of large established firms refines this further, sorting the relevant capabilities into the domains of performance, leadership, governance, and structure, and showing that incumbents face hard trade-offs between change and stability that startups do not (Kulichyova et al., 2025). This stream is the closest thing the field has to a standard model, and its language of sensing and seizing now appears throughout practitioner writing. The second stream studies #business_model_innovation in digital form. Here the question is not only what technology a firm uses but how it captures value. Digital business models often rely on network effects, where a service grows more useful as more people join, on data feedback loops, where use generates data that improves the service, and on platform structures that link many sides of a market at once. These features can produce winner-take-most outcomes, in which one or two firms come to dominate a market that older models would have kept competitive. The third stream is the broad #digital_transformation literature, which tries to pull everything together and to map the field as a whole. Recent reviews show that the field has expanded fast since the pandemic and that its themes now include leadership, culture, ecosystems, and strategy alongside technology (Plekhanov, Franke and Netland, 2023; Smolinski, 2024). What these streams share is a focus on the single firm as the unit of analysis and on performance as the main outcome. They ask how a company can become more capable and more profitable. These are fair questions, and the answers are valuable. Yet the same focus creates blind spots. The capability view assumes that firms choose freely, when in fact their choices are shaped by pressure from peers and regulators. It assumes the firm acts as one mind, when in fact it is full of people with different skills and different stakes. And it brackets out the wider world economy, treating the global setting as a backdrop rather than as a structure that allocates advantage in advance. The three social theories below speak to exactly these blind spots, each at its own level. 2.2 Institutional isomorphism: why organizations come to look alike The theory of #institutional_isomorphism was set out by DiMaggio and Powell in 1983 in a paper that has become one of the most cited in all of social science. Their puzzle was the opposite of the one most strategy scholars study. Strategy asks why firms differ. DiMaggio and Powell asked why firms in the same field grow so similar over time, even when similarity does not obviously make them more efficient. Their answer was that organizations seek #legitimacy as much as they seek profit. To be seen as proper and trustworthy by investors, regulators, customers, and employees, they adopt the structures and practices that others in their field already use. Looking right can matter as much as being efficient, and sometimes more. The theory names three pressures that push organizations toward sameness. The first is coercive pressure, which comes from laws, regulations, and powerful partners that demand certain practices. A government rule that public services must be available online is a clear example, as is a large buyer that requires its suppliers to use a particular digital system. The second is #mimetic_isomorphism, which appears when goals are unclear and the future is uncertain. Faced with doubt, organizations copy others that seem successful, on the reasoning that imitation is safer than guessing. The third is normative pressure, which spreads through professions, universities, consultants, and industry bodies that define what counts as good practice. Managers trained in the same programs and certified by the same associations tend to reach for the same solutions, because those are the solutions they were taught to respect. Recent work has carried these ideas straight into the digital field, and the fit is striking. A study of non-IT firms found that companies imitate the digital strategies of their peers, and that this imitation rises with the level of digitalization in their industry and region; firms copy in order to gain legitimacy when the path forward is unclear. Research on local governments shows all three pressures at work in public-sector digital projects: legal mandates apply coercive force, uncertainty about how to serve citizens drives copying, and shared professional standards spread common templates from one administration to the next. A broad review of institutional theory in international business confirms that these pressures remain central to how practices diffuse, while warning that organizations often respond in selective and creative ways rather than copying blindly (Kostova and Roth, 2022). Two ideas from this tradition matter most for digital innovation. The first is #decoupling. Organizations sometimes adopt a practice for show while changing little underneath. A firm may announce an artificial intelligence program to satisfy investors and the press while its daily work stays the same. The formal structure and the actual activity drift apart, and the gap is managed quietly. The second is the concept of the #organizational_field, the set of organizations that recognize one another as relevant and that share suppliers, customers, regulators, and ideas about good practice. In the digital age these fields are reshaped by platforms and by technical standards, which means the actors that set the rules of a field may now be platform owners rather than traditional competitors. Institutional theory also reminds us that organizations live with competing demands at once, and recent work on hybrid organizations shows how they juggle these conflicting logics through selective coupling rather than simply yielding to one of them (Battilana, Fuerstein and Lee, 2022). 2.3 Bourdieu: field, capital, habitus, and digital capital Pierre Bourdieu built a theory to explain how social inequality reproduces itself quietly, across generations, without anyone needing to enforce it openly. Three concepts carry the theory. A #field is a structured social space, such as art, education, or business, with its own rules and its own prizes. #Capital is any resource that gives advantage within a field. Bourdieu went beyond money to name several forms: economic capital, #cultural_capital such as knowledge and credentials, #social_capital such as useful relationships, and #symbolic_capital such as prestige and recognition. #Habitus is the set of dispositions, tastes, and ways of acting that people absorb from their upbringing and position, which then guide how they behave without conscious calculation. People carry their habitus into every room they enter, and it tells them, below the level of thought, what feels natural and what feels out of reach. The power of the theory is that it shows how capital converts from one form to another and how the rules of a field tend to favor those who already hold the right capital. Money buys education, education yields credentials, credentials open doors to powerful networks, and prestige attracts more of all three. People who grow up with the right tastes and credentials feel at home in elite settings, while others feel out of place even when they are formally qualified. Inequality then looks like merit, because the game rewards dispositions that some acquired early and others never had the chance to learn. The genius and the danger of the system is that it hides itself: those who succeed believe they earned it, and those who fail often believe the same. Scholars have extended Bourdieu's toolkit to the digital world, and the extension is now well established. The idea of #digital_capital captures the access, skills, and dispositions that let a person turn digital tools into real advantage. Merisalo and Makkonen (2022) argue that a distinct form of capital emerges when people use digital technologies in line with their goals to gain value they could not reach otherwise, and they show that people use digital space in ways that match their existing social, economic, and cultural positions. In other words, the digital realm does not erase old advantages; it carries them forward and sometimes sharpens them. Someone who already holds strong cultural and economic capital converts it readily into #digital_capital, while someone who lacks those resources struggles to do so, which means the move online can widen gaps rather than close them. A review of how Bourdieu's concepts spread across research fields confirms that field, capital, and habitus remain his most used and most adaptable tools, applied far beyond the settings he first studied (Schirone, 2023). The most provocative extension treats algorithms themselves as carriers of a kind of habitus. Airoldi (2022) argues that machine learning systems absorb the patterns of the data they are trained on and then act on the world in line with those patterns, much as a person acts from absorbed dispositions. This matters for digital innovation because it means the tools at the center of innovation are not neutral. They encode the assumptions and the inequalities of the settings that produced them. When firms build innovation on top of these tools, they may be reproducing bias while believing they are being objective, since a number on a screen feels impartial even when its source is not. For management, the Bourdieusian lens does three things. It opens up the firm, showing that a company is an arena where people with different capital compete for position rather than a single rational actor. It explains the digital divide inside organizations, where some employees convert their skills into influence and others are sidelined regardless of their value to the business. And it reframes the much-praised "digital mindset" as a #habitus that is unevenly distributed, which means calls for everyone to "think digital" may quietly favor those who already do, and penalize those whose strengths lie elsewhere. 2.4 World-systems theory: the global structure of digital advantage Immanuel Wallerstein's #world_systems_theory looks at the largest scale of all, the modern capitalist world economy as a single connected system rather than a collection of separate national economies. Wallerstein divided the world into three zones. Core economies hold the high-skill, high-profit activities and set the terms of trade. Periphery economies supply raw materials and cheap labor and largely take the terms they are given. Semi-periphery economies sit in between, with some advanced activity and some dependence, and they often act as a buffer that keeps the whole system stable. The key claim is that this is not a ladder that every country can climb at once. The structure works by transferring value from periphery to core, so the wealth of the core depends in part on the relative poverty of the periphery. The division of labor across these zones holds the system together and keeps reproducing it across long historical cycles. This framework was built to explain trade in goods, but it maps onto the digital economy with uncomfortable ease. The most valuable digital activities, such as designing advanced chips, building the largest models, owning the dominant platforms, and setting the technical standards that others must follow, are concentrated in a small number of core economies. Much of the rest of the world supplies the inputs that feed these activities: the minerals for hardware, often mined under harsh conditions; the low-paid data labeling that trains models; the vast user base whose everyday behavior becomes data; and the markets where core firms sell their services back at a premium. Value flows toward the core in the form of profits, fees, and control over standards, while the data and attention of the periphery flow outward. Scholars have begun to describe this pattern as a new form of dependency, sometimes called #data_colonialism, in which the extraction of data from many places enriches a few, echoing the extraction of raw materials in earlier eras. Recent scholarship in related fields supports the picture. Work on global science shows that the center-periphery model still describes how knowledge production and recognition are distributed, even as some countries rise within the system (Marginson and Xu, 2023). The point for digital innovation is that the #platform_economy does not flatten the world, as early commentators hoped when they spoke of a borderless internet. It builds new hierarchies along old lines. A periphery economy can host a thriving tech hub full of talented engineers and still depend on core-owned cloud infrastructure, core-set standards, and core-controlled app stores that take a cut of every sale. The semi-periphery, including several large emerging economies, can build real capacity and even national champions, yet remain rule-takers in the areas that matter most, such as foundational standards and the largest models. #Global_inequality in the digital age is therefore not a temporary gap waiting to close on its own. It is, on this reading, a feature of how the system is organized, and closing it would require changing the structure, not only working harder inside it. 2.5 Why combine these three theories These three theories are usually kept apart, taught in different courses and published in different journals, and their authors did not write with one another in mind. Yet they fit together because they describe different levels of the same reality. World-systems theory works at the macro level of the global economy. Institutional isomorphism works at the meso level of the field or sector. Bourdieu's theory works at the micro level of the person and the group, while also offering the idea of the field that links upward to the meso level. Read together, they let us trace a single thread from the structure of the world economy, through the behavior of organizations within a field, down to the dispositions of the people who do the work. There is a deeper reason they belong together. All three are theories of reproduction. Each was built to explain not how things change but how patterns of advantage persist, quietly and without obvious force. World-systems theory explains how the gap between core and periphery reproduces itself through trade and structure. Institutional isomorphism explains how organizational forms reproduce themselves through the search for legitimacy. Bourdieu explains how class advantage reproduces itself through capital and habitus. Digital innovation is usually framed as the great force of change, the thing that overturns industries and topples incumbents. The three theories together let us ask a sharper question: what if digital innovation, for all its disruption, also reproduces older patterns of advantage in new clothing? The #dynamic_capabilities view describes how a firm moves along the thread that runs across the levels, but the three social theories describe the shape of the road, including the slopes that make some moves easy and the walls that make others nearly impossible. The next sections put this combined lens to work. 3. Method 3.1 Research design This study uses an integrative literature review. An integrative review is suited to a question that crosses fields and that calls for synthesis rather than counting. The aim is not to measure an effect or to test a single hypothesis with new data. The aim is to draw together management, information systems, and sociology literature in order to build a clearer conceptual account of #digital_innovation as a social process. This design fits the goal of theory building, since it allows the author to compare frameworks, find the gaps between them, and propose a way to connect them. Integrative reviews are well suited to emerging or fragmented topics, where the value lies in mapping the terrain and proposing structure rather than in adding one more empirical data point to a settled debate. The review is guided by three questions. First, how has mainstream management research framed digital innovation, and what does that framing leave out? Second, what do institutional isomorphism, Bourdieu's theory of practice, and world-systems theory each add to the picture? Third, how can these lenses be combined into a single multi-level account that complements capability-based views? These questions move from description to critique to construction, and the structure of the paper follows the same arc. 3.2 Sources and search approach The review draws on peer-reviewed journal articles and scholarly books, with a strong preference for work published between 2021 and 2026 so that the account reflects current debate. A small number of foundational texts are included where they are unavoidable, because the three social theories cannot be discussed responsibly without reference to the works that defined them. These foundational sources are clearly the original statements of each theory, and they are used only to anchor concepts, while the analytical weight rests on recent scholarship that applies and updates them. Using only recent commentary on a theory, without ever pointing to the theory itself, would be less honest than naming the source directly. Sources were identified through searches of major academic databases and publisher collections using combinations of terms such as digital innovation, digital transformation, management theory, institutional isomorphism, dynamic capabilities, digital capital, Bourdieu, and world-systems. The search favored high-quality outlets in management, information systems, and the social sciences, since these fields hold the debates the study aims to connect. Reference lists of key articles were also scanned to find further relevant work, a technique known as backward searching, which often surfaces important sources that keyword searches miss. 3.3 Selection criteria A source was included if it met three tests. It had to be peer-reviewed or a recognized scholarly book. It had to speak to either digital innovation and management or to one of the three social theories in a way that could be linked to organizations and technology. And it had to be recent, with the exceptions noted above for foundational theory. Sources were set aside if they were purely technical with no organizational or social content, if they were promotional rather than scholarly, or if they duplicated stronger sources already selected. The goal was a focused set of strong sources rather than an exhaustive list, since the purpose of an integrative review is depth of synthesis rather than completeness of count. 3.4 Analysis procedure The selected literature was read closely and coded by theme. Coding began with the three levels that frame the study, the macro, the meso, and the micro, and then looked for cross-cutting ideas that appeared at more than one level, such as #legitimacy, inequality, and #path_dependence. The author wrote analytic memos that compared how the capability view and the three social theories explained the same phenomena, for example why firms adopt similar technologies, why digital value concentrates, and why much transformation appears to stall. These memos were then organized into the analysis and findings that follow. The method is interpretive, which means the synthesis reflects reasoned judgment rather than a mechanical procedure, and the reasoning is made visible throughout so that readers can weigh it for themselves and disagree where they see fit. 3.5 Limitations of the method An integrative review has limits that should be stated plainly. It depends on the sources chosen, and a different author might choose differently and reach somewhat different conclusions. It synthesizes existing claims rather than producing new primary data, so it cannot test the proposed framework against fresh evidence; it can only show that the framework is consistent with what the literature reports. And because it draws on several disciplines, it risks simplifying ideas that specialists treat with more care, since each of the three theories has internal debates that a single article cannot fully honor. These limits are real, but they are acceptable for a study whose purpose is to connect bodies of thought and to set an agenda, not to deliver a final measurement. The closing section turns these limits into directions for future empirical work. 4. Analysis 4.1 The macro level: digital innovation inside a world-system When we place digital innovation inside #world_systems_theory, the first thing we notice is that the map of digital power looks like the old map of economic power, only sharper. The activities that generate the most value and the most control are concentrated in core economies. These include the design of advanced semiconductors, the training of the largest models, the ownership of the platforms through which most digital trade flows, and the authority to set the technical standards that everyone else must follow. The periphery and much of the semi-periphery supply inputs: minerals dug under difficult conditions, low-paid labor that cleans and labels the data that trains models, and enormous populations of users whose daily activity becomes the raw material of the data economy. The analysis here is not that periphery economies do nothing digital. Many have lively startup scenes, skilled engineers, and proud national projects. The point is structural rather than personal. A firm in a periphery or semi-periphery economy usually builds on infrastructure owned by core firms, sells through app stores controlled by core firms, and operates under standards written elsewhere. The profits and the rule-making power drift toward the core, while the data and the attention drift outward from the periphery. This is why the idea of #data_colonialism has gained traction. It names a relationship in which value is extracted from many places and accumulated in few, much as raw materials once were carried from colony to metropole. The metaphor is strong, and it should be used with care, but it captures something the capability view cannot: that the relationship is unequal by design. This macro view changes how we read the management literature on #digital_transformation. Most of that literature is written from the standpoint of core-economy firms, for whom the central question is how to compete and grow. From a periphery standpoint, the more pressing question is how to avoid permanent dependence on systems owned and governed elsewhere. A capability-based answer, that firms should build dynamic capabilities, is not wrong, but it is incomplete, because no amount of firm-level capability changes who owns the cloud or who sets the standard. The structure constrains what local capability can achieve, the way a strong swimmer is still carried by the current. Recent reviews of digital transformation acknowledge context and environment, and some examine how factors shape transformation across countries, yet they rarely theorize the global structure itself as a system that allocates advantage in advance, which is the gap world-systems theory fills (Feliciano-Cestero et al., 2023). 4.2 The meso level: fields, pressure, and the spread of sameness At the level of the industry or sector, #institutional_isomorphism explains a pattern that puzzles the strategy view: across a field, firms tend to adopt similar digital practices at similar times, often regardless of whether the practice clearly pays off. The three pressures account for this. Coercive pressure appears when regulators or powerful customers require digital practices, such as electronic reporting, data-protection compliance, or a particular supplier platform. #Mimetic_isomorphism appears under uncertainty, when managers cannot be sure which digital path is right and so copy peers who seem to be winning, reasoning that it is better to fail conventionally than to fail alone. Normative pressure spreads through consultants, business schools, and industry associations that promote a shared model of what a modern, digital organization should look like, and that model travels from firm to firm through the people trained to carry it. The empirical literature backs this strongly. The study of non-IT firms cited earlier found that companies imitate the digital strategies of their peers, and that the urge to imitate rises with the digital intensity of their surroundings. This is mimetic behavior in action: the more digital the field becomes, the more each firm feels it must look digital too, in order to keep its #legitimacy in the eyes of customers and investors. The public-sector research shows the same forces shaping how local governments digitize, with legal mandates, peer imitation, and professional templates all pulling in the same direction, so that administrations far apart end up with strikingly similar systems. Two consequences follow. The first is homogenization. As pressure mounts, the digital strategies on offer narrow, and firms across a field converge on a few dominant approaches, often the ones promoted by the same handful of vendors and advisors who serve the whole sector. This is good for coordination and for legitimacy, and it lowers the risk of looking foolish, but it can dull the variety from which real innovation springs. The second consequence is #decoupling. Because the reward for adopting a digital practice is often legitimacy rather than performance, some organizations adopt the label without the substance. They launch the program, issue the press release, appoint the officer, and change little underneath. Recognizing decoupling helps explain the gap, familiar to every practitioner, between the bold language of transformation and the slow reality on the ground, where old systems and old habits persist behind the new branding. The capability view and the institutional view need not compete here. They explain different things. The capability view explains how a firm that genuinely transforms builds the routines to do so, the sensing and seizing and reconfiguring that real change demands. The institutional view explains why so many firms attempt transformation in the first place, why their attempts look alike, and why some of those attempts are mostly for show. A complete account of digital innovation needs both, which is why recent integrative work pairs attention to firm capabilities with attention to the institutional setting in which those capabilities are deployed (Kulichyova et al., 2025). 4.3 The micro level: capital, habitus, and inequality inside the firm Inside the organization, Bourdieu's tools reveal a layer that both the capability view and the institutional view tend to skip: the uneven distribution of advantage among the people who do the work. A firm is not a single mind. It is a #field in miniature, where employees compete for position using the capital they hold. In a digital setting, #digital_capital becomes a prized resource. Those who can build systems, read data, and speak the language of platforms gain influence, while those who cannot are pushed to the margins, even when they hold deep knowledge of the business itself. A manager who has run a factory floor for twenty years may suddenly find that a younger colleague who can build a dashboard carries more weight in the room, and the shift can feel less like merit than like a change in the rules of the game. This produces a digital divide within the organization that mirrors the one in society. Bourdieu's insight is that this divide is not random. It tracks earlier advantages. People who arrived with strong #cultural_capital, the right education, and early exposure to technology find it easier to acquire digital capital, while others start further back and must run to catch up. The fashionable call for a "digital mindset" can therefore become a quiet way of rewarding a #habitus that some already possess. When a firm prizes those who "think digital," it may be prizing a disposition that correlates with prior privilege rather than with present merit. Research extending Bourdieu to digital settings shows exactly this carry-over of advantage, with people using digital space in line with the positions they already hold (Merisalo and Makkonen, 2022). The Bourdieusian reading also turns a sharp eye on the technology itself. If algorithms absorb the patterns of their training data and then act on those patterns, as Airoldi (2022) argues, then a tool built to drive innovation may reproduce the inequalities baked into its data. A hiring model trained on a firm's past choices will tend to favor the kinds of people the firm has always favored. A recommendation system will tend to amplify what is already popular, pushing the already-visible further into view. In Bourdieu's terms, the machine inherits a habitus and enacts it at scale, all the while wearing the mask of objectivity that a calculation seems to provide. For managers, this means that adopting an advanced digital tool is never a neutral act. It can entrench the very patterns the firm claims it wants to change, and it can do so more efficiently than any human ever could. 4.4 Cross-level dynamics: how the levels feed one another The three levels are not separate boxes. They feed one another in a loop. Consider how they combine in a single example. A large platform firm in a core economy sets a technical standard, which is a macro structural move. Vendors and consultants then promote that standard as best practice across an industry, which is a meso normative pressure, and firms adopt it to stay legitimate, often through mimetic copying rather than careful evaluation. Inside each adopting firm, the employees who already hold digital capital lead the adoption and gain influence, while others fall behind, which is a micro Bourdieusian dynamic. The result reinforces all three levels at once: the core firm's standard becomes more dominant, the field grows more homogeneous, and internal inequality deepens. The system reproduces itself, which is precisely the kind of quiet, self-sustaining reproduction that all three theories were built to explain. This cross-level view also exposes a limit in the way #path_dependence is usually discussed. The capability literature treats path dependence as a firm-level trap, where past investments and routines lock a company into outdated ways even when better options exist. The multi-level reading shows that path dependence runs across levels too. Global structure locks fields into core-set standards; fields lock firms into shared templates; firms lock individuals into roles defined by the capital they happen to hold. Breaking a path at one level may not be enough, because the other levels keep pulling the system back toward its old shape. A firm that tries to adopt a different standard may find no vendors who support it, no staff trained in it, and no customers who expect it. This is a sobering message for anyone who believes that a single bold strategy can reset the game, and it explains why so many ambitious transformations end up looking like everyone else's. 4.5 An illustrative reading across sectors To show the framework at work, consider three short readings, kept general so that they describe patterns rather than name particular companies. In retail banking, coercive pressure from regulators and the example of a few leading firms have pushed nearly every bank toward similar mobile apps and similar data platforms, which is meso isomorphism; the core technology often rests on cloud services owned by a handful of core-economy providers, which is the macro structure; and inside each bank, data and engineering teams have risen in status while branch staff have lost it, which is the micro dynamic. In public administration, the same pattern appears, with legal mandates to digitize services, heavy copying between agencies that face similar uncertainty, and a widening gap between officials who command digital capital and those who do not. In creative and media work, platform owners set the rules of distribution, smaller producers across the world depend on those platforms while supplying much of the content and the audience data, and within each producer the people who understand the platform's metrics gain power over those who understand the craft. In each case, the #dynamic_capabilities view describes how a given organization tries to adapt, while the three social theories explain why the field looks the way it does, who benefits, and why the adaptation so often converges on the same shape. The framework does not predict a single outcome, but it tells the analyst where to look. 5. Findings The analysis yields six connected findings, followed by the integrated framework that ties them together. Each finding shows where the social theories add to, rather than replace, the mainstream management account of #digital_innovation. 5.1 Adoption is driven by legitimacy as much as by value The first finding is that organizations often adopt digital technology to be seen as proper and current, not only because it improves performance. The drive for #legitimacy, working through coercive, mimetic, and normative pressure, explains why digital practices spread in waves across a field and why adoption frequently outruns clear evidence of benefit. This reframes a familiar complaint. When managers grumble that their firm chases every new trend, they are observing #institutional_isomorphism at work rather than mere fashion. The lesson is not that legitimacy is foolish, since legitimacy is a real resource that attracts customers, talent, and capital. The lesson is that managers should know when they are buying legitimacy and when they are buying performance, because the two are not the same and call for different justifications and different ways of measuring success. 5.2 Homogenization can crowd out the variety that innovation needs The second finding follows from the first. As pressure pushes firms in a field toward the same digital practices, the field grows more uniform. This convergence brings order and shared standards, which lower costs and make systems work together, and those are real gains. But innovation feeds on variety, on firms trying different things and learning from the differences between them. When everyone adopts the same platforms, the same tools, and the same playbook from the same advisors, the field's capacity for genuine novelty can shrink even as the language of innovation grows louder. There is a paradox here worth naming for students: the harder a field pushes everyone to "innovate" in the same approved way, the less true innovation it may actually produce, because real novelty usually comes from the edges rather than from the consensus. 5.3 Adoption is often partial, and decoupling is common The third finding is that a large share of digital transformation is symbolic. Because the reward for adoption is often legitimacy, organizations can gain most of that reward by adopting the appearance of change while leaving their core practices intact. #Decoupling explains the persistent gap between the confident stories firms tell about their digital journeys and the slower, messier reality inside, where legacy systems and entrenched routines often survive untouched behind the new branding. For practice, this means that the presence of a digital program tells us little on its own. The real question is whether the program is coupled to daily work or floating above it as a display, and answering that question requires looking past the announcements to the actual flow of work. 5.4 Digital value concentrates by global structure, not by accident The fourth finding moves to the largest scale. Reading digital innovation through #world_systems_theory shows that the concentration of digital wealth in a few core economies is structural, not accidental or temporary. Control over infrastructure, platforms, and standards channels profit and power toward the core, while data and attention flow from the periphery. Firm-level capability matters, but it operates inside this structure and cannot by itself change who owns the foundations on which everyone else builds. For students from emerging economies in particular, this finding reframes the goal. The task is not only to build capable firms but to ask how a country can move toward the core, capture more value at home, and avoid the deep #global_inequality that the platform economy can entrench. The recognition that the center-periphery pattern persists even in the production of knowledge reinforces the point and warns against easy optimism (Marginson and Xu, 2023). 5.5 Inequality lives inside the firm as well as between nations The fifth finding brings the lens down to the workplace. Bourdieu's tools show that digital innovation redistributes advantage among employees, rewarding those who hold #digital_capital and sidelining those who do not, often along lines set by earlier privilege rather than current contribution. The internal digital divide is not a temporary skills gap that training alone will close, because the dispositions that make digital capital easy to acquire, the digital #habitus, are unevenly distributed to begin with. Managers who want fair and effective transformation must treat this as a question of justice and design, not only of training budgets. They must ask whose knowledge is being valued, whose is being quietly discarded, and whether the tools they adopt are reproducing old patterns under a new name while presenting themselves as objective. 5.6 The tools of innovation are not neutral The sixth finding concerns the technology itself. If algorithmic systems carry a kind of habitus absorbed from their data, as recent sociology of algorithms argues (Airoldi, 2022), then building innovation on these tools risks scaling up existing bias while appearing impartial. This finding cuts against a deep assumption in the capability literature, which tends to treat digital tools as neutral instruments that simply extend a firm's reach and do what they are told. The social reading insists that the instrument shapes the outcome and carries values of its own, inherited from the data and the choices that made it. Responsible digital innovation therefore includes scrutiny of the tools, not just skill in using them, and it asks managers to be as curious about what a system was trained on as about what it can do. 5.7 An integrated multi-level framework Taken together, these findings support a single integrated framework, which is the main contribution of the article. The framework places digital innovation at the meeting point of three levels. At the macro level, #world_systems_theory explains the global structure that allocates digital advantage between core and periphery. At the meso level, #institutional_isomorphism explains how fields shape and homogenize organizational behavior and produce both real and symbolic adoption. At the micro level, Bourdieu's theory explains how capital and #habitus distribute advantage among people and how the tools themselves carry social patterns. Running across all three levels are the shared dynamics of #legitimacy, inequality, and #path_dependence, which link the levels and help the whole system reproduce itself over time. The mainstream #dynamic_capabilities view sits inside this framework rather than against it. It describes the mechanism by which an individual organization moves and adapts, the sensing, seizing, and reconfiguring that recent studies map in detail (Ellstrom et al., 2022; Kulichyova et al., 2025). The social theories describe the terrain across which that movement happens, the slopes and the walls that make some moves easy and others nearly impossible. A manager equipped with only the capability view sees the engine but not the road. A manager equipped with the integrated framework sees both, and is better placed to judge which moves are worth the fuel and which will simply carry the firm to the same place as everyone else. For students, the framework offers a simple practice: read any digital innovation case at three levels at once, asking in turn about the global structure, the field pressures, and the human distribution of advantage. Three questions, asked in order, will reveal far more than any single question about strategy. 5.8 What the framework asks practitioners to do The framework is not only a way of seeing; it suggests action. At the macro level, it asks firms and especially governments in semi-periphery and periphery settings to treat dependence on core-owned infrastructure and standards as a strategic risk worth managing, through investment in local capacity, regional standards bodies, and skills. At the meso level, it asks managers to separate the pursuit of legitimacy from the pursuit of performance, to be honest about which one a given project serves, and to resist copying for its own sake when copying does not fit the firm's real situation. At the micro level, it asks leaders to design transformation so that it values existing knowledge rather than discarding it, to spread digital capital deliberately rather than letting it pool among the already-advantaged, and to scrutinize the tools they adopt for the patterns those tools carry. None of this is easy, and the cross-level pull toward the old shape is strong, but naming the forces is the first step toward acting on them with open eyes. 6. Conclusion This article set out to show that #digital_innovation is a social and political process, not only a technical or strategic one, and that classic #management_theory and social theory together explain it far better than any single framework can. The dominant capability-based view tells managers how a firm can sense, seize, and reconfigure its way through digital change, and that knowledge is valuable and hard-won. But it brackets out three things that decide much about who innovates and who benefits: the global structure that concentrates digital power, the field pressures that push organizations to look alike and to adopt for show, and the human inequalities that digital tools can carry and deepen. These are not side issues. They are the questions of fairness and direction that decide what digital innovation is finally for. By reading digital innovation through #world_systems_theory, #institutional_isomorphism, and Bourdieu's theory of #field, #capital, and habitus, the study built an integrated multi-level framework. The macro level explains the concentration of digital wealth in core economies and the dependence of the periphery, a pattern sharp enough that scholars now speak of #data_colonialism. The meso level explains why firms in a field converge on similar digital practices, why much adoption is symbolic through #decoupling, and how the search for legitimacy drives waves of transformation that outrun evidence of benefit. The micro level explains how #digital_capital and digital habitus distribute advantage inside organizations and how algorithmic tools encode the patterns of their data. Across all three levels, the shared dynamics of legitimacy, inequality, and #path_dependence knit the system together and help it reproduce. The recurring theme is reproduction: the suggestion that digital innovation, for all its real disruption, often carries older patterns of advantage forward in new clothing. The implications are practical as well as theoretical. For managers, the framework is a warning against three comfortable beliefs: that adopting the latest technology is always a free and rational choice, that its rewards will be broadly shared, and that the global playing field is level. For policymakers, especially in semi-periphery and periphery economies, it reframes the goal from building capable firms in isolation to building the infrastructure, standards capacity, and skills base that let a country capture more digital value at home and resist permanent dependence. For students, it offers a habit of mind: read every digital case at three levels, and ask not only how to do it but who wins, who copies, and who is left out. That habit will serve them whatever technology comes next. The study has limits, and naming them points the way forward. It is an integrative review, so it synthesizes existing claims rather than testing the framework against new data, and its synthesis reflects the author's reasoned choices about which sources to include. Future research should put the framework to work empirically. Comparative studies could test how the three levels interact across industries and across core and periphery settings, and whether the cross-level loop described here holds up under close observation. Fieldwork inside organizations could trace how #digital_capital is won and lost during a transformation, and how decoupling unfolds in real time rather than in retrospect. Critical studies of digital tools could examine how an algorithmic habitus shapes innovation outcomes in specific, well-documented cases. The largest task is to keep insisting, against the steady pull of purely technical framings, that digital innovation is something people do to one another as well as something firms do to markets. Seen that way, the old theories are not relics. They are some of the sharpest tools we have for understanding the newest technology, and for asking the questions that matter most: not only what digital innovation can build, but whom it builds it for. Hashtags #Digital_Innovation #Management_Theories #Institutional_Isomorphism #Bourdieu #World_Systems_Theory #Dynamic_Capabilities #Digital_Capital #Digital_Transformation #Organizational_Field #Data_Colonialism #Core_Periphery #Digital_Divide #Platform_Economy #Decoupling #Academic_Research References Airoldi, M. (2022). Machine habitus: Toward a sociology of algorithms. Polity Press. Battilana, J., Fuerstein, M., and Lee, M. (2022). Institutional complexity and hybrid organizations: A review and research agenda. Academy of Management Annals, 16(1), 1-44. https://doi.org/10.5465/annals.2019.0080 Bourdieu, P. (1986). The forms of capital. In J. Richardson (Ed.), Handbook of theory and research for the sociology of education (pp. 241-258). Greenwood Press. DiMaggio, P. J., and Powell, W. W. (1983). The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields. American Sociological Review, 48(2), 147-160. https://doi.org/10.2307/2095101 Ellstrom, D., Holtstrom, J., Berg, E., and Josefsson, C. (2022). Dynamic capabilities for digital transformation. Journal of Strategy and Management, 15(2), 272-286. https://doi.org/10.1108/JSMA-04-2021-0089 Feliciano-Cestero, M. M., Ameen, N., Kotabe, M., Paul, J., and Signoret, M. (2023). Is digital transformation threatened? A systematic literature review of the factors influencing firms' digital transformation and internationalization. Journal of Business Research, 157, 113546. https://doi.org/10.1016/j.jbusres.2022.113546 Kostova, T., and Roth, K. (2022). Institutional theory in international business and management: A review and extension. Journal of International Business Studies, 53(4), 666-686. https://doi.org/10.1057/s41267-021-00476-7 Kulichyova, A., Kazantsev, N., White, L., and Islam, N. (2025). Digital transformation in large established organisations: Four restructuring dilemmas based on dynamic capabilities. International Journal of Management Reviews, 27(3), 420-450. https://doi.org/10.1111/ijmr.12395 Marginson, S., and Xu, X. (2023). Hegemony and inequality in global science: Problems of the center-periphery model. Comparative Education Review, 67(1), 31-52. https://doi.org/10.1086/722760 Merisalo, M., and Makkonen, T. (2022). Bourdieusian e-capital perspective enhancing digital capital discussion in the realm of third level digital divide. Information Technology and People, 35(8), 231-252. https://doi.org/10.1108/ITP-08-2021-0594 Plekhanov, D., Franke, H., and Netland, T. H. (2023). Digital transformation: A review and research agenda. European Management Journal, 41(6), 821-844. https://doi.org/10.1016/j.emj.2022.09.007 Rego, B. S., Jayantilal, S., Ferreira, J. J., and Carayannis, E. G. (2022). Digital transformation and strategic management: A systematic review of the literature. Journal of the Knowledge Economy, 13(4), 3195-3222. https://doi.org/10.1007/s13132-021-00853-3 Schirone, M. (2023). Field, capital, and habitus: The impact of Pierre Bourdieu on bibliometrics. Quantitative Science Studies, 4(1), 186-208. https://doi.org/10.1162/qss_a_00232 Smolinski, J. (2024). Navigating the digital frontier: Emerging trends in digital innovation management for 2023 and beyond. International Journal of Innovation and Technology Management, 21(4), 2450032. https://doi.org/10.1142/S0219877024500329 Wallerstein, I. (2004). World-systems analysis: An introduction. Duke University Press.

Most writing on #network_security and #information_security_management explains the topic through technical controls and individual psychology. This article argues that those two angles, while useful, leave out the social forces that decide why organizations protect data the way they do and why some protect it far better than others. The study is a structured conceptual review that reads the management side of security through three social theories: Pierre Bourdieu's ideas of field, capital, and habitus; Immanuel Wallerstein's world-systems theory; and the institutional isomorphism model of Paul DiMaggio and Walter Powell. Drawing on recent peer reviewed work published between 2021 and 2026, the analysis shows three patterns. First, security practices spread between organizations less through proof that they work and more through #coercive_pressure from regulators, imitation of admired peers, and professional norms, which is the core claim of #institutional_isomorphism. Second, security ability inside an organization behaves like a form of #capital that is unevenly held, so the people and units with more economic, cultural, and #symbolic_capital shape what counts as good practice, which is a Bourdieusian reading of the security #field. Third, protection ability is split unevenly across the world economy, with rule making and high value processing concentrated in #core countries and raw data and exposure pushed toward the #periphery, which world-systems theory predicts. The article offers a three level framework that links the individual #habitus, the organizational field, and the global system, and it closes with study directions and teaching points for students. The contribution is a clearer social account of why #security_governance looks the way it does. 1. Introduction When people hear the phrase #information_security, they usually picture firewalls, passwords, encryption, and the work of technical staff who keep attackers out. That picture is not wrong, but it is incomplete. The management of security, meaning the decisions about what to protect, how much to spend, which standards to follow, who is responsible, and how to measure success, is a social activity carried out by human beings inside organizations that sit inside a larger economy. The same technical control can be adopted in one company because a law requires it, in a second company because a respected competitor adopted it first, and in a third company because the security profession treats it as the proper thing to do. The control is identical, but the reasons are social, and those reasons shape how the control is actually used. This article is about the management theories that help explain those social reasons. The aim is to show that #network_security and information security are not only engineering problems and not only matters of individual choice. They are also matters of #power, #legitimacy, and position. To make that case, the article uses three well established theories from sociology and organizational studies and applies them to security management. The first is the work of Pierre Bourdieu, who gave us the linked ideas of field, capital, and habitus, tools that help explain how advantage is built and passed on. The second is world-systems theory, associated with Immanuel Wallerstein, which divides the world economy into a wealthy and rule setting #core, a dependent #periphery, and an in between #semi_periphery. The third is institutional isomorphism, the idea from DiMaggio and Powell that organizations in the same field come to look alike because of pressure rather than because sameness is efficient. The reason for choosing these three is that each one answers a question that the standard technical and behavioral accounts struggle to answer. The behavioral accounts, which dominate the research on #policy_compliance, tell us a great deal about why an individual employee follows or breaks a rule. A recent systematic review of this literature found that the most used frameworks are general deterrence theory, the theory of planned behavior, and #protection_motivation theory, and that factors such as training, trust, leadership, and #security_culture appear again and again (Delso-Vicente et al., 2025). This body of work is valuable, but it tends to stop at the edge of the organization. It does not explain why two organizations facing the same threats build very different security programs, or why certain practices sweep across an entire industry in a few years, or why poorer countries and smaller firms remain exposed no matter how much individual awareness rises. Those are questions about fields, capital, and global structure, and that is where the three chosen theories earn their place. The gap this article addresses is therefore not a lack of security theory in general but a shortage of social and structural theory in the management of security. The research field has grown quickly and is still mostly technical in character. A large scale study of forty years of security and privacy research, covering more than thirteen thousand papers, found that the community remains strongly oriented toward technical topics and that social science framing is rare, even though the authors themselves used Bourdieu's #field_theory to interpret the research community as a social space where #cultural_capital, #symbolic_capital, and #social_capital are produced and exchanged (Demir et al., 2026). If sociological theory is useful for understanding how security researchers behave as a group, it is reasonable to expect it to be useful for understanding how security managers and organizations behave as well. The purpose of the article is threefold. The first purpose is to set out, in plain language, what these three theories actually claim, so that a student new to the subject can follow the argument without prior training in sociology. The second purpose is to apply each theory to concrete problems in security management, such as the spread of standards, the building of security ability, and the uneven protection of data across the world. The third purpose is to bring the three theories together into a single layered framework that connects the individual person, the organization and its field, and the global system. The article does not claim that these theories replace technical or behavioral approaches. It claims that they complete them. The structure follows the usual shape of a research article. After this introduction, the background section explains what is meant by security management and lays out the three theories. The method section describes how the literature was gathered and read. The analysis section applies the theories to security management problems one at a time and then together. The findings section states the patterns that emerge and the framework that ties them together. The conclusion reflects on limits and points to future work. The article is written for students and for readers who want a serious but readable account, and it uses recent sources so that the examples and evidence are current. 2. Background and Theoretical Framework 2.1 What is meant by network and information security management Before applying theory, the object of study needs a clear definition. Information security is commonly described through three goals: keeping data confidential, keeping it accurate and whole, and keeping it available when needed. Network security is the part of this work that protects the connections and systems through which data moves. The word #management points to something broader than the technology. Management covers the policies that state what is allowed, the #risk_management process that decides what to worry about and in what order, the governance arrangements that assign responsibility to named people and boards, the standards and certifications that organizations adopt, and the measurement that tells leaders whether the program is working. A useful way to see the scale of the management problem is to look at how cyber risk is studied. A systematic review of cyber risk and cybersecurity found that even the basic data needed to manage risk well, such as reliable figures on losses and incidents, is scattered and incomplete, which makes confident decision making hard (Cremer et al., 2022). Other recent work argues that the future of the field depends on frameworks that join technical defense with organizational and human factors rather than treating defense as a purely technical race (Safitra et al., 2023). The cost of getting management wrong is visible in the growth of #data_breach litigation, where analysis of court cases shows that breaches now carry large legal and financial consequences, not only technical ones (Molitor et al., 2023). All of this tells us that security management is a decision making activity carried out under uncertainty, and decision making under uncertainty is exactly the territory where social theory becomes useful, because people facing uncertainty look to rules, to peers, and to their own trained instincts. 2.2 The dominant theory families and their limits The research literature on managing the human side of security is large and is built mostly on a handful of psychological and behavioral theories. As noted, the most common are general deterrence theory, which holds that people comply when penalties are likely and severe; the theory of planned behavior, which connects intentions to attitudes, social norms, and a sense of control; and protection motivation theory, which says people protect themselves when they believe a threat is serious, that it could happen to them, and that the recommended action will work and is within their ability (Delso-Vicente et al., 2025). Supporting factors that appear across this literature include security education and training, the support of top management, trust in leaders, and the surrounding security culture. These theories are strong at the level of the single person and the single organization, and they have produced practical guidance, such as the finding that visible support from senior leaders and a healthy culture matter more than fear based messaging for steady compliance. Recent work in specific settings supports this. A study of financial organizations in the United Arab Emirates found that #cybersecurity_leadership played a mediating role in preventing cyberattacks, meaning that the quality of leadership helped turn intentions and resources into actual prevention (Al-Kumaim and Alshamsi, 2023). The limit is that these accounts treat the organization as a more or less closed box. They ask what makes the people inside the box behave, but they do not ask why the box itself is shaped the way it is, why boxes in the same industry come to resemble one another, or why some boxes are far better resourced than others. Those questions need theories that look at fields, at capital, and at the global system. 2.3 Institutional isomorphism: why organizations copy one another The first structural theory is #institutional_isomorphism, set out by DiMaggio and Powell (1983). Their puzzle was simple and lasting. Why do organizations in the same field become so similar over time, even when being different might serve them better? Their answer was that organizations are pushed toward sameness by three kinds of pressure rather than by a search for the most efficient design. The first pressure is #coercive_pressure, which comes from laws, regulators, and powerful partners who can demand certain behavior. In security, this is everywhere. The European Union has built a layered set of rules, including the Cyber Resilience Act and the NIS 2 Directive, that force many organizations to adopt particular security measures whether or not they would have chosen them (Eckhardt and Kotovskaia, 2023). When a regulator can fine you or shut you out of a market, you adopt the required controls, and so do all your competitors, and the field grows more alike. Large customers exert the same kind of force on their suppliers, requiring certifications and audits as a condition of doing business. The second pressure is #mimetic_pressure, which is imitation under uncertainty. When managers are not sure what the right answer is, and security is full of uncertainty, they copy organizations they see as successful or respectable. If a leading bank announces a certain security framework, other banks tend to follow, partly because copying a respected peer is safer than inventing your own approach and being blamed if it fails. The third pressure is #normative_pressure, which comes from professions. Security has become a profession with its own training, certifications, conferences, and shared sense of correct practice. As people move between organizations and carry these professional norms with them, organizations adopt similar practices because the professionals inside them agree on what proper security looks like. The key insight for management theory is that adoption is often about #legitimacy rather than pure effectiveness. An organization may adopt a standard such as #ISO_27001 less because it has proven the standard reduces its own risk and more because holding the certificate signals to customers, regulators, and partners that the organization is responsible and trustworthy. This does not mean the practices are useless. It means the reason for adopting them is social as much as technical, and that has consequences. If a control is adopted mainly for show, it may be implemented thinly, which is one reason that certified organizations still suffer breaches. 2.4 Bourdieu: field, capital, and habitus in security The second theory comes from Pierre Bourdieu, whose central tools are field, #capital, and #habitus, often called his conceptual triad and still the most used part of his thought across many disciplines (Schirone, 2023). A field is a structured social space, like a game with its own stakes and rules, in which players compete for position. Capital is what players bring to the game. Bourdieu went beyond money to name several forms. Economic capital is wealth and resources. #Cultural_capital is knowledge, skill, and credentials. Social capital is useful relationships and networks. Symbolic capital is recognition, prestige, and the right to be taken seriously. These forms can be converted into one another, so money can buy training that becomes skill that becomes a reputation that opens doors. Habitus is the set of deep, often unspoken dispositions that people pick up from their environment and that guide how they act, usually without conscious thought. It is the feel for the game that an experienced player has. In security, the habitus of a seasoned defender includes instincts about what looks suspicious and what corners can or cannot be cut, instincts that are hard to teach directly and that mark insiders from outsiders. Bourdieu's framework has already been used to read the security and privacy research world. The large study of four decades of research treated that world as a field in which authors accumulate cultural capital through publications, symbolic capital through citations and prestigious venues, and social capital through collaboration networks, and showed that these forms convert into one another and concentrate among certain actors (Demir et al., 2026). The same logic applies to security management. Inside an organization, the security function competes with other functions for budget and authority, which is economic and symbolic capital. A chief information security officer with a strong reputation and good networks can win resources and shape policy in ways that a less recognized colleague cannot, regardless of the technical merits of their proposals. Across organizations, the sector treats certain firms, certifications, and individuals as holding high symbolic capital, and their practices set the standard that others feel they must match. There is also a growing argument that access to digital skill and protection is itself a form of capital that is unevenly distributed, sometimes called #digital_capital. This matters because it links Bourdieu's micro level account to questions of inequality. People and groups who inherit more economic and cultural capital tend to acquire more digital and security capital, which protects them better, while those with less remain exposed. This is not a moral failing of the exposed. It is the predictable result of how capital is distributed and reproduced. 2.5 World-systems theory: core, periphery, and the global shape of protection The third theory lifts the view to the level of the whole world economy. World-systems theory, associated with Wallerstein (2004), argues that countries are not separate units each developing on their own but parts of a single capitalist world economy bound together by unequal exchange. The world is divided into a #core of wealthy, technologically advanced states that control finance, advanced production, and rule making; a #periphery of poorer states that mainly supply raw materials and cheap labor and have little control over the terms of trade; and a #semi_periphery that sits between the two, partly dependent on the core and partly dominant over the periphery. Applied to security, this theory predicts a #core_periphery split in protection ability. The core sets the standards, builds the dominant platforms, trains the elite workforce, and processes the high value data. The periphery supplies users and raw data while depending on tools, rules, and services made elsewhere, a pattern that some scholars describe as a digital echo of older dependency. The evidence that protection ability is split this way is strong. Recent research in a developing country found that socioeconomic and #digital_inequality shape #cybersecurity ability directly, so that students and citizens from poorer backgrounds face more exposure and have weaker means to defend themselves, reproducing existing disadvantage in the digital space (Khan et al., 2024). At the level of national policy, the way that national cybersecurity strategies are written and the way they build education and workforce capacity differ sharply between richer and poorer states, which widens the gap further (AlDaajeh et al., 2022). The phrase #cyber_inequity has entered policy discussion to name this widening gap, where well resourced organizations and countries grow steadily more resilient while the rest fall behind, and where the weakest parts of a connected system endanger the whole. World-systems theory explains why this gap is not an accident that better technology will erase but a structural feature of how the global economy is arranged, in which advantage at the core is partly built on the dependence of the periphery. 2.6 Why three theories rather than one A fair question is why the article uses three theories rather than committing to one. The answer is that each works best at a different level. Bourdieu's tools work best at the level of people and organizations, explaining how advantage is built and felt. Institutional isomorphism works best at the level of the field, explaining how practices spread between organizations. World-systems theory works best at the level of the globe, explaining the large pattern of who is protected and who is exposed. Used together, they cover the individual, the organization, and the world without forcing one scale to do work it is not suited for. The three also share a family resemblance. All three are theories about #power and #inequality, about how advantage concentrates and reproduces itself rather than spreading evenly. That shared concern is what allows them to be combined into a single layered framework later in the article. 2.7 How the social view differs from the technical and behavioral view It helps to set the three theories beside the two more familiar ways of thinking about security, so that the difference is clear rather than assumed. The technical view treats security as a contest of tools and configurations, an arms race in which defenders build stronger walls and attackers find new ways through. It asks what control stops which attack. The behavioral view treats security as a matter of individual decisions, asking what makes a particular employee follow a rule, click a link, or report a problem, and it builds on the deterrence, planned behavior, and protection motivation theories already described (Delso-Vicente et al., 2025). Both views are correct as far as they go, and neither should be discarded. The social view does not compete with these. It sits underneath them and asks a different kind of question. Where the technical view asks which control to use, the social view asks why a whole industry adopted that control at the same time. Where the behavioral view asks what makes a person comply, the social view asks why that person works in an organization with the resources, the standards, and the position in the world economy that it has. The technical and behavioral views take the organization and its setting as given and work inside them. The social view explains how the setting itself came to be shaped, which is why it can answer questions about industry wide change, about concentration of ability, and about global gaps that the other two views cannot reach. A complete account of security management uses all three, with the social view supplying the frame inside which technical and behavioral choices are made. 3. Method This study is a structured conceptual review, also called an integrative review. It does not run an experiment or collect survey data. Instead it gathers, reads, and synthesizes existing scholarship in order to build a clearer theoretical account. This approach is well suited to a topic where the goal is to connect ideas that are usually kept apart, in this case the social theories on one side and the security management literature on the other. The review is conceptual rather than systematic in the strict sense, meaning it does not claim to capture every paper ever written, but it follows a disciplined and repeatable process so that the reasoning can be checked. The search drew on major scholarly databases and indexes, including publisher platforms and citation databases that cover computing, management, and the social sciences. The search combined terms from two pools. The first pool held security management terms such as information security management, network security, security policy compliance, security governance, cybersecurity strategy, and information security standards. The second pool held theory terms such as institutional isomorphism, institutional theory, Bourdieu, field theory, forms of capital, habitus, world-systems theory, and #core_periphery. Combining a term from each pool surfaced work that joins security and social theory, which is the target of the review. The main time window was set to 2021 through 2026 so that the evidence and examples would be current, since both the threat environment and the rules around security change quickly. Within this window, priority went to peer reviewed journal articles and to systematic reviews, because reviews summarize large bodies of work and reduce the risk of resting an argument on a single study. A small number of foundational works fall outside the time window and are included on purpose, because the article is about applying these specific theories and the originating statements of Bourdieu, of DiMaggio and Powell, and of Wallerstein cannot be replaced by newer summaries without losing accuracy. These foundational sources are clearly marked as the origin of each theory, while the recent sources carry the evidence and the contemporary application. Sources were screened for fit and quality. Fit meant that a source either described security management in a way that the theories could illuminate or applied one of the theories to a technology, security, or organizational setting. Quality meant peer review, a clear method where the source was empirical, and publication in a recognized venue. Once selected, each source was read closely and coded by hand into theory categories. A source that described regulation forcing adoption was coded under coercive pressure. A source that described imitation of peers was coded under mimetic pressure. A source about professional norms was coded under normative pressure. Sources about resources, skill, prestige, and inherited advantage were coded under Bourdieu's forms of capital, and sources about instinct and trained disposition were coded under habitus. Sources about global inequality, dependence, rule setting concentration, and uneven protection were coded under world-systems theory. Some sources carried more than one code, and those overlaps were noted because they later became the joints of the combined framework. The analysis then proceeded in two passes. In the first pass, each theory was applied on its own to a set of security management problems, to see what it could explain that the technical and behavioral accounts could not. In the second pass, the three theories were read against one another to find where they connect, which produced the layered framework reported in the findings. Throughout, the aim was honest synthesis rather than forcing the evidence to fit. Where a theory fit loosely or where the evidence was thin, this is stated rather than hidden. The limits of a conceptual review are discussed in the conclusion, the main one being that synthesis depends on the judgment of the reviewer and cannot claim the completeness of a full systematic review with statistical pooling. 4. Analysis 4.1 Reading the spread of security practice through institutional isomorphism The clearest place to see #institutional_isomorphism at work is the spread of security standards and frameworks. Over a relatively short period, certain frameworks and certifications have become near universal expectations in many industries. The standard technical story is that organizations adopted them because they reduce risk. The institutional story is richer. Organizations adopt them because regulators require them, because admired peers hold them, and because the security profession treats them as proper. All three of DiMaggio and Powell's pressures are visible. #Coercive_pressure is the most direct. The European rules that bind many organizations into specific security behavior show how a regulator can reshape an entire field, since once the Cyber Resilience Act and the NIS 2 Directive apply, organizations across the affected sectors must adopt comparable measures or face penalties and market exclusion (Eckhardt and Kotovskaia, 2023). The effect is sameness by law. The same force flows down supply chains, where a powerful buyer requires its suppliers to certify, and the suppliers in turn require their own suppliers, so that a single demand at the top ripples outward until a whole network looks alike. This downward pressure is one reason that #cyber_inequity is dangerous for everyone, because the weakest supplier can become the entry point that defeats the strong buyer, a risk that policy bodies now treat as systemic. #Mimetic_pressure shows up wherever uncertainty is high, and security is deeply uncertain because defenders rarely know whether their measures are enough until they are tested by an attack. Faced with this, managers copy. When a respected firm announces a security approach, others follow, not always because they have evidence it works but because copying a high status peer is defensible. This is rational behavior under uncertainty, but it has a downside. It can spread practices that look impressive without proving they reduce risk, and it can lock a field into approaches that are hard to question once everyone has adopted them. #Normative_pressure flows from the security profession itself. As security has matured into a recognized field with shared training, certifications, and conferences, the people who fill security roles arrive with a shared sense of what good practice is. When they move between employers, they carry these norms, so organizations converge because their security professionals already agree on the proper way to do things. The way that national strategies invest in cybersecurity education shapes this normative layer, because the workforce that a country trains carries that country's idea of proper practice into its organizations (AlDaajeh et al., 2022). The management lesson is that a security leader who wants to introduce a practice should understand which pressure they are using. Arguing only that a control is effective may fail if the field is moving on legitimacy. Conversely, a leader can use isomorphism deliberately, pointing to regulation, to respected peers, and to professional consensus to win support for a control that is genuinely useful. The risk to watch is the gap between adoption for legitimacy and real protection, where an organization holds a certificate but implements it thinly. The presence of data breach litigation against certified organizations is a sign that this gap is real and costly (Molitor et al., 2023). 4.2 Reading security ability through Bourdieu's capital and habitus Bourdieu's tools turn attention from the spread of practice to the building and holding of security ability. Treat the sector as a field in which organizations and professionals compete for position, and treat security ability as a form of #capital. Several patterns become visible that the technical account misses. The first pattern is conversion. Economic capital, meaning budget, buys tools, staff, and training, which become #cultural_capital in the form of skill and credentials, which over time become symbolic capital in the form of reputation as a secure and trustworthy organization. That symbolic capital then converts back into economic capital, because customers and partners prefer to deal with organizations seen as safe, and into authority, because a trusted security function wins arguments inside the organization. This circle helps explain why security ability tends to concentrate. Organizations that start with more can convert their advantages into still more, while those that start with less struggle to break in. The study of the security and privacy research community showed exactly this kind of conversion among researchers, where publications, citations, and collaboration networks reinforced one another and concentrated among certain actors and venues (Demir et al., 2026), and the same dynamic operates among security practitioners and firms. The second pattern is #habitus. Skilled defenders carry a trained set of instincts that guide fast judgment, the feel for the game that lets an experienced analyst sense that something is wrong before they can fully explain why. This is real and valuable, but it has a cost. Habitus can make a security culture resistant to outsiders and to new ideas, because the instincts that work in one setting are taken as simply correct rather than as one possible way of seeing. A security team with a strong shared habitus may dismiss approaches that do not match its instincts, even when those approaches would help. For management, this means that building security ability is not only about hiring skill but about being aware of the blind spots that come with any settled way of seeing. The third pattern connects Bourdieu to inequality through #digital_capital. Access to security skill and protection is unevenly distributed in the same way that other forms of capital are, and it tends to follow existing advantage. Research in a developing country setting found that socioeconomic position shaped cybersecurity ability, so that those with more economic and cultural capital were better protected and those with less were more exposed, which reproduced disadvantage rather than reducing it (Khan et al., 2024). This is a Bourdieusian result. The unequal protection is not random and is not simply a matter of individual effort. It follows from how capital is distributed and passed on. The role of #cybersecurity_leadership as a factor that converts resources and intentions into real prevention (Al-Kumaim and Alshamsi, 2023) can be read in the same frame, since leadership is a form of cultural and symbolic capital that some organizations possess and others lack. 4.3 Reading global protection through world-systems theory World-systems theory lifts the analysis to the scale of the world economy and explains the largest pattern of all, the uneven spread of protection across countries. The theory predicts that rule making, advanced production, and high value processing concentrate in the core, while the periphery supplies users and raw data and depends on tools and rules made elsewhere. Security follows this map closely. The core sets the standards that the rest of the world adopts. The dominant frameworks, the leading platforms, and the influential regulations come mostly from a small set of wealthy states and the large firms based in them. When the European Union writes rules that bind organizations far beyond Europe through supply chains and market access, that is core rule making shaping peripheral behavior (Eckhardt and Kotovskaia, 2023). The core also trains and holds the elite security workforce and concentrates the research, as the four decade study of the research community showed when it found output concentrated in a few countries and institutions (Demir et al., 2026). The periphery, meanwhile, faces a double bind. It must adopt standards it did not write and depend on tools it does not control, while having fewer resources to protect itself. The research on socioeconomic and digital inequality in a developing country setting captures the human face of this, showing that ordinary users in poorer settings are more exposed and less able to defend themselves (Khan et al., 2024). The way national strategies build, or fail to build, cybersecurity education widens the gap, because workforce capacity is the foundation of national protection and it is far easier to build with core level resources (AlDaajeh et al., 2022). The result is the widening #cyber_inequity that policy bodies now treat as a systemic risk, where the gap between the cyber resilient and the rest grows over time rather than closing. The value of world-systems theory here is that it stops us from treating cyber inequity as a temporary problem that more technology will fix. The theory predicts that the gap is built into the structure, because the advantage of the core depends in part on the dependence of the periphery, and because the same connections that spread technology also spread the rule making power of the core. This does not make the gap permanent, since the semi periphery shows that movement is possible and some states have climbed, but it does mean that closing the gap requires changing structures and not only adding tools. 4.4 Bringing the three readings together Read separately, each theory explains a different slice of security management. Read together, they reveal a single connected picture, because the three levels feed one another. The global system sets the rules and concentrates resources at the core. Those rules and resources flow into organizational fields as the standards and expectations that drive isomorphism. The isomorphic field then shapes which forms of capital are valued and who can accumulate them. And the capital that individuals and organizations hold, along with the habitus that guides their judgment, determines how well they actually defend themselves, which in turn reproduces their position in the field and in the world system. The joints between the theories are the most interesting part. The point where coercive pressure meets world-systems theory is core rule making, where standards set by wealthy states become binding on everyone connected to their markets. The point where institutional isomorphism meets Bourdieu is legitimacy, since the practices a field treats as proper are exactly the ones that confer symbolic capital, so adopting them is both an isomorphic move and a capital building move at the same time. The point where Bourdieu meets world-systems theory is the unequal distribution of digital capital, where the advantages of the core and the disadvantages of the periphery show up in the everyday protection of real people, as the developing country research demonstrated (Khan et al., 2024). These joints are not loose connections. They are the places where the layered framework in the next section is anchored. 4.5 A worked illustration: how a certification requirement spreads A short illustration shows the three theories working at once on a single ordinary event, the spread of a security certification requirement through an industry. Suppose a large buyer, perhaps a bank or a manufacturer, decides that every supplier must hold a recognized security certification before it will sign a contract. The immediate cause is often regulatory, since rules such as the European measures that bind organizations into specific security behavior push the buyer to manage the risk in its own supply chain (Eckhardt and Kotovskaia, 2023). This is coercive pressure in action, and it does not stop at the buyer. The buyer passes the demand to its suppliers, who pass it to their own suppliers, so a single requirement travels outward and a whole network of firms moves toward the same certificate. As the requirement spreads, the other two pressures appear. A respected supplier that already holds the certificate, and perhaps exceeds it, becomes a model that others copy, because imitating a successful peer is safer than working out an approach alone. That is mimetic pressure. Meanwhile the security professionals inside these firms, trained in the same way and sharing the same sense of proper practice, treat the certificate as simply what responsible firms do, which is normative pressure. Within a few years the certificate is everywhere in the industry, and holding it has become a mark of legitimacy that a firm needs in order to be taken seriously. Now read the same event through Bourdieu and through world-systems theory. A large, well resourced supplier converts its economic capital, meaning its budget and staff, into the cultural capital of skill and the symbolic capital of the certificate, and it does so with relative ease. A small supplier, especially one based in a poorer country, faces the same demand with far fewer resources, and for it the certificate is a heavy cost that may be out of reach. This is where the global pattern shows itself. The rule originated in the core, the large suppliers near the core absorb it comfortably, and the small suppliers toward the periphery are squeezed, some priced out of the market entirely (Khan et al., 2024; AlDaajeh et al., 2022). The single requirement, which looked like a neutral technical demand, turns out to widen the gap between the protected and the exposed, and because the squeezed suppliers remain part of the connected system, their weakness becomes a shared risk for everyone, including the powerful buyer that started the chain. One event, three theories, and a fuller explanation than any single view could give. 5. Findings 5.1 Five patterns that emerge from the synthesis The analysis produces five clear patterns. The first is that the spread of security practice is driven heavily by #legitimacy, not only by proof of effectiveness. Organizations adopt standards and frameworks because regulators require them, because peers hold them, and because the profession expects them, which is the core of institutional isomorphism. This means that the presence of a control says less about its real effect than the technical account assumes, and it explains why adoption can be wide while real protection stays uneven. The second pattern is that security ability behaves like capital that concentrates and reproduces. Economic, cultural, and symbolic capital convert into one another, so organizations and individuals that start with more tend to accumulate still more, while those that start with less are left behind. The concentration found in the research community (Demir et al., 2026) mirrors what happens among practitioners and firms. The third pattern is that protection is split along core-periphery lines at the world scale. Rule making and high value processing concentrate in the core, while the periphery supplies data and users and carries more exposure with fewer resources, a gap visible in both individual behavior (Khan et al., 2024) and national capacity (AlDaajeh et al., 2022). The widening of this gap is the cyber inequity that policy bodies now treat as systemic. The fourth pattern is that habitus shapes judgment in ways that are both an asset and a risk. Trained instinct lets skilled defenders act fast and well, but it can also harden into resistance to new ideas and to outsiders, so building security ability requires attention to blind spots, not only to skill. The fifth pattern is that the levels connect. The global system shapes the field, the field shapes the distribution of capital, and capital and habitus shape real protection, which then reproduces position. The same power and inequality that the three theories each describe at one level run through all three levels at once. 5.2 A three level framework for security management These patterns combine into a framework with three connected levels, which can be taught and used. The bottom level is the individual and the team, read through Bourdieu. Here the questions are about capital and habitus. What economic, cultural, social, and symbolic capital does this person or team hold? What trained instincts guide their judgment, and what do those instincts hide? Management action at this level includes building skill, recognizing reputation, and deliberately challenging settled instincts so the team can see what its habitus hides. The middle level is the organization and its field, read through institutional isomorphism. Here the questions are about pressure and legitimacy. Which coercive, mimetic, and normative pressures are shaping this organization's choices? Is a given practice being adopted for real protection or for legitimacy, and is the gap between the two being managed? Management action at this level includes using the three pressures on purpose to win support for genuinely useful controls, and watching for the gap between holding a certificate and actually being secure. The top level is the world system, read through world-systems theory. Here the questions are about position and dependence. Is this organization or country at the core, the semi-periphery, or the periphery of the security world? Whose rules and tools does it depend on, and what does that dependence cost? Management and policy action at this level includes building local capacity, reducing harmful dependence where possible, and recognizing that cyber inequity in supply chains is a shared risk, since the weakest link endangers the strongest. The strength of the framework is that it tells a security leader or a policy maker which level a problem lives on. A team that cannot see a new class of threat has a habitus problem at the bottom level. An industry adopting a useless but fashionable control has an isomorphism problem at the middle level. A country exposed because it depends entirely on tools and rules made elsewhere has a world system problem at the top level. Diagnosing the level points to the kind of action that will help, and it prevents the common mistake of trying to fix a structural problem with an individual solution, such as expecting more user awareness to close a gap that is really about global resource distribution. 5.3 Implications for students and practitioners For students, the main implication is that security management cannot be understood through technology alone, and that the social theories taught in other courses are directly useful here. A student who understands capital, legitimacy, and core-periphery position will ask better questions about why a security program looks the way it does than a student who knows only the technical controls. The framework gives students a way to organize what can otherwise feel like a scattered set of facts about laws, standards, tools, and behavior. For practitioners, the synthesis offers practical guidance at each level. At the individual and team level, invest in skill but also build in challenge, so that the team's habitus is tested rather than trusted blindly, and recognize that cybersecurity leadership is itself a form of capital that turns resources into protection (Al-Kumaim and Alshamsi, 2023). At the organizational level, understand the pressures driving adoption, use them deliberately, and never confuse holding a standard with being secure, since the cost of that confusion shows up in breaches and litigation (Molitor et al., 2023). At the system level, treat dependence and supply chain weakness as real risks, support capacity building, and recognize that the data needed to manage all of this well is still incomplete (Cremer et al., 2022), which argues for humility and for investment in better measurement. For policy makers, world-systems theory carries a sharp message. Closing cyber inequity will not happen on its own and will not be fixed by technology alone, because the gap is structural. It requires deliberate building of capacity in the periphery and the semi-periphery, fairer participation in the rule making that currently concentrates in the core, and recognition that a connected world is only as secure as its least protected parts. 5.4 Objections and boundary conditions An honest account names the objections to its own argument. The first objection is that much security adoption really is rational and effective, so reading it as a matter of legitimacy or capital may seem to explain away good practice. The reply is that the social view does not deny that controls work. It points out that effectiveness and social pressure usually run together, and that when they pull apart, for example when a control is adopted for show and implemented thinly, the social view explains the gap that the technical view cannot. The presence of breaches at certified organizations is evidence that the gap is real (Molitor et al., 2023), and explaining it is a strength of the social view, not a weakness. The second objection is that the three theories overlap and might be collapsed into one. The reply is that they overlap at their joints by design, but each carries weight at a level the others cannot reach, so combining them adds explanatory range rather than repeating a single idea. The third objection is that the framework is hard to test. This is partly true, and it is why the conclusion calls for empirical work, but the patterns the theories predict, such as concentration of ability and a widening global gap, are already visible in the recent evidence (Demir et al., 2026; Khan et al., 2024). The theories also have boundary conditions that a careful user should respect. Coercive pressure dominates in heavily regulated sectors such as finance and health, where law leaves little room for choice, while mimetic pressure dominates in fast moving areas where rules have not yet caught up and managers copy because no one is sure what works. World-systems effects are easy to miss from inside a single well resourced firm in a wealthy country, where the global gap is someone else's problem until a peripheral supplier is breached and the problem arrives. Naming these conditions keeps the framework from being stretched into a claim that one theory explains everything everywhere, which it does not. 6. Conclusion This article set out to show that the management of network security and information security is a social activity that the dominant technical and behavioral theories explain only in part. By reading security management through three established social theories, the study has tried to fill that gap. Institutional isomorphism explains why security practices spread between organizations through coercive pressure, imitation, and professional norms, and why adoption is often about legitimacy as much as effectiveness. Bourdieu's tools of field, capital, and habitus explain how security ability is built, held, and reproduced, and why it concentrates among those who already hold advantage. World-systems theory explains the largest pattern, the uneven split of protection between a rule setting core and a dependent periphery, and why cyber inequity is structural rather than temporary. Brought together, the three theories form a layered framework that connects the individual, the organization and its field, and the world system, and that tells a leader or a student which level a given problem lives on. The contribution is a clearer social account of why security governance looks the way it does, offered in plain language for students and practitioners. The article does not claim that social theory replaces technical or behavioral approaches, both of which remain necessary. It claims that social theory completes them, and that the management of security cannot be fully understood without attention to power, legitimacy, and position. Several limits should be stated honestly. The study is a conceptual review, so its synthesis rests on reasoned judgment rather than on statistical pooling, and a different reviewer might weigh the evidence differently. The recent empirical sources, while peer reviewed and current, are drawn from particular settings, and applying their lessons elsewhere should be done with care. The three theories were chosen because they cover three useful levels, but other theories, such as actor network theory, which was used alongside Bourdieu in the four decade research study (Demir et al., 2026), could add further angles. The base of reliable data on cyber risk and losses remains incomplete (Cremer et al., 2022), which limits how confidently any theory can be tested against outcomes. These limits point to future work. The clearest next step is empirical testing of the layered framework, for example by studying whether organizations that adopt standards mainly for legitimacy implement them more thinly than those that adopt for protection, and whether that difference shows up in breach outcomes. Another step is comparative study across the core, semi-periphery, and periphery to map how security capital is distributed globally and how dependence shapes protection. A third step is closer study of habitus in security teams, to learn how trained instinct helps and where it hides risk. Work along these lines would turn the framework offered here from a way of seeing into a tested account, and would strengthen the case that the management of security is, at its heart, a social matter. Keywords and Hashtags #information_security_management network security institutional isomorphism #Bourdieu #world_systems_theory habitus cultural capital symbolic capital field theory cyber inequity security governance policy compliance core-periphery digital capital risk management Topic Hashtags #NetworkSecurity #InformationSecurity #SecurityManagementTheory #InfoSecTheories #CyberSecurityManagement #NetworkAndInformationSecurity #ISMS #SecurityGovernance #InstitutionalTheory #BourdieuInSecurity #WorldSystemsAndCyber #InfoSecResearch #CyberRiskManagement #SecurityStandards #DataProtection #CyberPolicy #SecurityCulture #DigitalInequality #InformationSecurityStudies #SecurityManagement References AlDaajeh, S., Saleous, H., Alrabaee, S., Barka, E., Breitinger, F., and Choo, K.-K. R. (2022). The role of national cybersecurity strategies on the improvement of cybersecurity education. Computers and Security, 119, 102754. https://doi.org/10.1016/j.cose.2022.102754 Al-Kumaim, N. H., and Alshamsi, S. K. (2023). Determinants of cyberattack prevention in UAE financial organizations: Assessing the mediating role of cybersecurity leadership. Applied Sciences, 13(10), 5839. https://doi.org/10.3390/app13105839 Bourdieu, P. (1986). The forms of capital. In J. G. Richardson (Ed.), Handbook of theory and research for the sociology of education (pp. 241-258). Greenwood Press. Cremer, F., Sheehan, B., Fortmann, M., Kia, A. N., Mullins, M., Murphy, F., and Materne, S. (2022). Cyber risk and cybersecurity: A systematic review of data availability. The Geneva Papers on Risk and Insurance - Issues and Practice, 47(3), 698-736. https://doi.org/10.1057/s41288-022-00266-6 Delso-Vicente, A.-T., Diaz-Marcos, L., Aguado-Tevar, O., and Garcia Blanes-Sebastian, M. (2025). Factors influencing employee compliance with information security policies: A systematic literature review of behavioral and technological aspects in cybersecurity. Future Business Journal, 11(1), 28. https://doi.org/10.1186/s43093-025-00452-7 Demir, N., Bottger, C., Hosseini, H., Demir, M., Wressnegger, C., Pohlmann, N., and Urban, T. (2026). Four decades of security and privacy research: Evolution of topics, impact, and the community. Journal of Cybersecurity, 12(1), tyag007. https://doi.org/10.1093/cybsec/tyag007 DiMaggio, P. J., and Powell, W. W. (1983). The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields. American Sociological Review, 48(2), 147-160. Eckhardt, P., and Kotovskaia, A. (2023). The EU's cybersecurity framework: The interplay between the Cyber Resilience Act and the NIS 2 Directive. International Cybersecurity Law Review, 4(2), 147-164. https://doi.org/10.1365/s43439-023-00084-z Khan, N. F., Ikram, N., and Saleem, S. (2024). Effects of socioeconomic and digital inequalities on cybersecurity in a developing country. Security Journal, 37(2), 214-244. https://doi.org/10.1057/s41284-023-00375-4 Molitor, D., Raghupathi, W., Saharia, A., and Raghupathi, V. (2023). Exploring key issues in cybersecurity data breaches: Analyzing data breach litigation with ML-based text analytics. Information, 14(11), 600. https://doi.org/10.3390/info14110600 Safitra, M. F., Lubis, M., and Fakhrurroja, H. (2023). Counterattacking cyber threats: A framework for the future of cybersecurity. Sustainability, 15(18), 13369. https://doi.org/10.3390/su151813369 Schirone, M. (2023). Field, capital, and habitus: The impact of Pierre Bourdieu on bibliometrics. Quantitative Science Studies, 4(1), 186-208. https://doi.org/10.1162/qss_a_00232 Wallerstein, I. (2004). World-systems analysis: An introduction. Duke University Press.

This article asks a simple question with a complicated answer. Why have so many organizations, in so many countries, started to manage themselves through numbers at almost the same time, and what does this shift do to power inside and between firms? To answer it, the paper brings #data_analytics into conversation with three social theories that are rarely used together in the management classroom: Pierre Bourdieu's theory of field, capital, and habitus; the theory of #institutional_isomorphism developed by DiMaggio and Powell; and #world_systems_theory in the tradition of Wallerstein, extended through recent work on data colonialism. The study uses an integrative, theory-led review of peer reviewed work published mostly within the last five years, drawn from management, information systems, and sociology. The synthesis produces three linked arguments. First, the ability to collect, read, and act on data has become a form of #capital that decides who counts as a serious manager and which firms are treated as modern. Second, the rapid and look-alike adoption of analytics across firms is better explained by the search for #legitimacy than by proven gains in performance, which means that mimetic, coercive, and normative pressures are doing much of the work. Third, the global pattern of data extraction repeats an older core and periphery structure, so the benefits of analytics flow unevenly between the #global_north and the #global_south. The paper offers a combined framework that students and researchers can use to study analytics adoption without assuming that more data always means better management. It closes with practical and ethical implications for managers, regulators, and educators, and with a short agenda for future research on data governance and fair value sharing. Keywords: data analytics; management theory; Bourdieu; institutional isomorphism; world-systems theory; data colonialism; legitimacy; data governance 1. Introduction Over the last decade, the phrase "let the data decide" has moved from technology companies into ordinary management talk. Hospitals track patient flow on live dashboards. Schools rank teachers using test score models. Banks approve loans through scoring engines. Retailers reorder stock based on prediction models rather than a manager's feel for the season. In each case, the promise is the same: that #data_analytics will make decisions faster, fairer, and more profitable. The promise is attractive, and it is repeated so often that it now sounds like common sense. Common sense is exactly what this paper wants to question. When something becomes obvious, it stops being studied. Managers and students are taught the tools of analytics, such as regression, clustering, dashboards, and machine learning, but they are rarely asked why the whole field of management decided, at roughly the same moment, that these tools were essential. They are taught how to build a model, but not why the firm that builds one is suddenly seen as more serious than the firm that does not. They learn that #big_data can improve performance, but they seldom learn that many firms adopt analytics with little measurable gain and keep doing it anyway. These gaps matter because management is not only a technical activity. It is a social activity, shaped by status, imitation, and power. A purely technical account of analytics, which treats data as a neutral input that produces better output, cannot explain the social facts that surround it. It cannot explain why some skills carry prestige while others do not. It cannot explain why two competing firms in the same market end up with almost identical analytics teams, tools, and language. And it cannot explain why the raw material of the data economy, the daily behavior of billions of people, is collected mostly in one set of countries and turned into value mostly in another. The cost of ignoring these social facts is not only academic. A manager who believes that analytics is pure objectivity may push a model into a decision it cannot support, and then defend the result by pointing at the screen. A board that adopts analytics mainly to look modern may spend heavily and gain little, while believing it has bought a competitive edge. A government that signs its citizens onto foreign platforms may hand away the value of its own population's data without noticing. In each case, a clearer view of the social side of analytics would have led to a better choice. Theory is not a luxury here. It is a tool for seeing what the technical story hides. To build that clearer view, the paper turns to social theory. Three frameworks are especially useful. The first is Bourdieu's theory of practice, which treats society as a set of fields where actors compete using different forms of #capital and where success depends on having the right #habitus, a kind of trained instinct for the game. Applied to management, this lets us treat #analytics_capability not just as a tool but as a resource that confers status and authority. Recent work has begun to describe data itself as a new form of capital, which makes Bourdieu directly relevant to the data economy (Verwiebe and Hagemann, 2024). The second framework is #institutional_isomorphism, the classic idea that organizations in the same environment grow to resemble one another because they face the same pressures to look legitimate, not necessarily because they have all found the same best answer (DiMaggio and Powell, 1983). This explains the wave-like, look-alike spread of analytics far better than a story about each firm independently discovering its value. The third framework is #world_systems_theory, which describes a global economy split into a wealthy core, a dependent periphery, and an in-between semi-periphery, with value flowing upward from poorer to richer zones (Wallerstein, 2004). Updated for the digital age through the idea of #data_colonialism, it helps explain why the gains from analytics are spread so unevenly across the world (Couldry and Mejias, 2024). None of these theories was built for the study of #data_analytics. That is precisely why they are useful. Because they were developed to explain status, imitation, and global inequality in general, they can shine a light on parts of the analytics story that the management literature usually leaves dark. The aim of this paper is not to reject the technical benefits of analytics. Those benefits are real in many settings. The aim is to place those benefits inside a fuller social picture, so that students can think clearly about both the value and the cost of going data driven. The paper is organized in the standard way. The next section builds the theoretical framework, introducing each theory and showing how it connects to data. The method section explains how the literature was gathered and synthesized. The analysis section applies the three theories to the practice of analytics in organizations, and includes a fair hearing of the counterarguments. The findings section pulls out the main patterns and states them as clear propositions. The conclusion draws out the implications for managers, regulators, and teachers, and suggests where research should go next. Three questions guide the whole paper. How does the skill of reading and using data act as a form of capital and #power inside organizations? Why do firms adopt analytics in such similar ways, and what role does the search for #legitimacy play in that pattern? And how does the global structure of data collection shape who gains and who loses from the analytics economy? Each question is matched to one of the three theories, and the conclusion brings the answers back together. 2. Background and Theoretical Framework 2.1 Data analytics as a management practice Before turning to theory, it helps to fix what we mean by data analytics in management. At a basic level, analytics is the practice of turning recorded information into a basis for action. It is usually described in four steps that build on one another. Descriptive analytics reports what happened, summarizing the past into figures and charts. Diagnostic analytics explains why it happened, looking for causes and patterns. Predictive analytics estimates what is likely to happen next, using statistical and machine learning models. Prescriptive analytics goes furthest and recommends what to do, sometimes acting on its own. Around these activities sit the data infrastructure that stores and moves information, the governance rules that decide who can use it, and the people who turn raw numbers into meaning. The popular image of analytics focuses on the clever model, but in practice most of the work, and most of the difficulty, lies in the boring layers of plumbing, definitions, and trust. The dominant academic account of analytics in management comes from the resource based view and the idea of dynamic capabilities. In this account, a firm's #analytics_capability is a bundle of technology, data, skills, and management routines that, when combined well, can improve performance and competitive advantage (Wamba et al., 2017). Later work refined this by showing that the technology matters less than the human and cultural side. Firms that build a strong #data_driven_culture, where managers actually trust and use the numbers, tend to perform better than firms that merely buy the tools (Karaboga et al., 2023). Studies of human factors reach a similar point, arguing that the scarce ingredient is not software but the people who can frame problems and read results (Korherr and Kanbach, 2023). There is also good evidence that analytics improves outcomes in specific operational settings, such as supply chains and manufacturing, when it is tied to clear decisions (Awan et al., 2021; Awan et al., 2022). Even in fields far from business, such as nursing management, reviews report that analytics can support better administrative decisions when it fits the real work of managers (Darach et al., 2025). This literature is valuable, and the present paper builds on it rather than against it. But it shares a common assumption: that organizations adopt analytics because it works, and that the main research task is to find the conditions under which it works best. That assumption leaves several puzzles unsolved. It does not explain the prestige attached to analytics skills, the near identical adoption patterns across rival firms, or the global imbalance in who supplies data and who profits from it. It also struggles with a stubborn fact reported across the field: a large share of analytics investments never turn into measurable value, yet firms keep investing. For these puzzles, we need theories of #power, imitation, and inequality. We turn to them now. 2.2 Bourdieu: data as capital, analytics as a field Pierre Bourdieu offered a way to study society that focuses on the games people play for status and advantage. He used three main ideas. A field is a structured space of competition, such as the art world, the university system, or a particular industry, with its own rules and its own prizes. #capital is whatever counts as valuable in a given field, and Bourdieu insisted it comes in several forms: economic capital, which is money and assets; #cultural_capital, which is knowledge, credentials, and taste; social capital, which is useful relationships and networks; and #symbolic_capital, which is recognition and prestige. #habitus is the set of trained dispositions that people carry from their upbringing and training, a feel for the game that makes some moves seem natural and others unthinkable (Bourdieu, 1986). A recent review of how these ideas spread through research confirms that the triad of field, capital, and habitus remains Bourdieu's most used and most portable contribution, especially in studies of organizations (Schirone, 2023). These ideas map onto data analytics with surprising ease. Consider capital first. The ability to collect, clean, model, and interpret data is a clear form of #cultural_capital. It is built through education and practice, it is unevenly distributed, and it can be converted into economic reward through promotions and salaries. Recent sociological work goes further and argues that the personal data of users has itself become a new kind of capital, a resource that firms accumulate and convert into profit, which means that control over data is now a position of advantage in its own right (Verwiebe and Hagemann, 2024). When a firm holds large stores of behavioral data, it holds something close to economic capital. When its data scientists are admired and quoted across the industry, the firm and its staff hold #symbolic_capital. Now consider the field. Inside a single organization, there is a contest over whose judgment counts. For a long time, authority belonged to those with deep experience and a feel for the business. The rise of analytics shifts the rules of that contest. The person who can produce a chart that predicts next quarter's sales gains standing against the veteran manager who relies on experience. This is not a neutral upgrade. It is a change in what kind of capital wins, and therefore a change in who holds #power. Studies of technology workers describe exactly this, showing that data professionals carry a distinctive #habitus built around self measurement and the constant production of data products, a way of seeing the world that marks them as members of a rising occupational group (Dorschel, 2022). The idea of habitus also explains why analytics can feel obvious to some and alien to others. A manager trained in a quantitative discipline finds it natural to ask for the data first. A manager trained in a craft tradition may find the same demand cold or beside the point. Neither reaction is simply right or wrong. Each reflects a different habitus, formed by a different training. Bourdieu's point is that the side whose habitus matches the dominant rules of the field will tend to win, and will tend to experience that win as merit rather than as advantage. This helps explain why the spread of analytics often feels like progress to those it favors and like a loss of voice to those it does not. Bourdieu's framework, then, lets us ask sharp questions. Who gains capital when a firm goes data driven, and who loses it? Whose habitus fits the new rules, and whose does not? When analytics is presented as pure objectivity, whose interests does that presentation serve? These questions move analytics from a technical topic to a question of power and inequality inside the organization. 2.3 Institutional isomorphism: why firms copy each other The second framework explains a pattern that any observer of industry will recognize. Firms in the same field tend to look alike. They adopt the same tools, use the same job titles, write similar strategy documents, and chase the same metrics. DiMaggio and Powell called this #institutional_isomorphism and argued that it happens through three pressures (DiMaggio and Powell, 1983). The first is #coercive_pressure, which comes from rules, laws, and powerful partners that an organization depends on. A firm may build an analytics function because a regulator demands data reporting, because a large customer requires it, or because a parent company sets the standard. Research on public sector #digital_transformation shows this clearly, where national mandates push local governments to digitize services and adopt data standards whether or not each one is ready. The second is #mimetic_pressure, which appears when goals are unclear and the future is uncertain. In that fog, organizations copy the firms they see as successful, on the theory that imitation is safer than invention. Empirical work on firms in uncertain markets finds that they imitate the digital strategies of industry leaders, and that this copying spreads more widely as the surrounding economy digitizes. The third is #normative_pressure, which comes from professions, training, and shared standards. As universities produce thousands of analytics graduates, as consultancies sell the same playbooks, and as professional bodies promote the same metrics, a common idea of what a proper modern firm looks like takes hold. A study of small firms found that normative and mimetic pressures, more than coercion, drove the initial adoption of new digital tools, which suggests that imitation and professional fashion are especially strong forces at the start (Osakwe and Ikhide, 2022). The deep insight of this theory is uncomfortable for the standard story of analytics. Institutional isomorphism predicts that organizations adopt practices to gain #legitimacy, to look correct and modern to the outside world, even when those practices do not clearly improve performance. This fits the evidence well. Many firms invest heavily in #big_data tools and then struggle to turn them into value, with a large share of analytics projects failing to scale. If analytics were adopted only when it paid off, we would not see this gap. The gap makes sense once we accept that part of the reason to adopt analytics is to be seen as the kind of organization that uses analytics. The dashboard is partly a tool and partly a costume. This does not mean analytics is empty theater. It means that adoption is driven by a mix of real benefit and social pressure, and that the social pressure can run ahead of the proof. The two reasons can also reinforce each other. A firm may begin its analytics journey to look legitimate, hire skilled people to staff the effort, and then discover real uses that those people invent once they are inside. Legitimacy seeking can therefore be a doorway to genuine capability, not only a mask for its absence. For students, the lesson is to separate two questions that are usually merged: does this analytics practice improve our decisions, and does it make us look #legitimate? Both can be true, but they are not the same, and a healthy organization knows which one it is buying at any given moment. 2.4 World-systems theory and data colonialism The third framework lifts the analysis from the single firm to the whole planet. #world_systems_theory, developed by Wallerstein, describes the modern economy as one connected system divided into zones. The core contains wealthy regions that specialize in high value, knowledge intensive work and that capture most of the profit. The periphery contains poorer regions that supply raw materials and cheap labor and that receive little of the value they help create. The semi-periphery sits between, holding some advantages over the periphery while remaining dependent on the core. The engine of the system is unequal exchange, in which value flows steadily upward from poorer to richer zones through the ordinary workings of trade (Wallerstein, 2004). For most of its history this theory was applied to physical goods, such as cotton, sugar, and oil. Recent scholarship has extended it to data, and the extension is striking. The thinkers behind the idea of #data_colonialism argue that today's data economy repeats the basic move of historic colonialism. Where old empires seized land, bodies, and natural resources, the new system appropriates human life itself by turning everyday behavior into a stream of data that can be owned and sold (Couldry and Mejias, 2024). The raw material, our clicks, locations, purchases, and conversations, is gathered everywhere, often without meaningful consent. But the infrastructure that processes it, the platforms that profit from it, and the experts who model it are concentrated in a small number of core countries and firms. The result is a core and periphery pattern made of data. People and organizations in the #global_south supply enormous quantities of behavioral data and serve as users of platforms they do not own. The high value activities, designing the algorithms, training the models, and capturing the advertising and prediction revenue, stay in the core. Studies of #data_governance in the developing world describe this imbalance directly, noting that the use and benefit of data are skewed toward the wealthy regions while poorer regions remain rule takers rather than rule makers. This is not a story about individual firms behaving badly. It is a structural pattern, the same kind of unequal exchange that world-systems theory described for earlier eras, now running on fiber optic cables. This framework changes how we read the success of data analytics. A model that helps a core firm target customers more precisely may depend on data extracted from periphery populations who see none of the gains. The celebrated efficiency of the global platform economy can rest on a quiet transfer of value from the many to the few. For management students, world-systems theory provides the vocabulary to see analytics not only as a tool inside a firm but as one node in a global flow of data and value, with winners and losers spread across the map. 2.5 An integrated framework The three theories are not rivals. They operate at different levels and fit together into a single picture. Bourdieu works at the level of people and firms, explaining how analytics skill becomes capital and reshapes power and habitus inside an organization. Institutional isomorphism works at the level of the industry or field, explaining why firms adopt analytics in such similar ways and how the search for legitimacy drives the wave. World-systems theory works at the level of the globe, explaining how the gains and losses of the analytics economy are distributed across rich and poor regions. Read together, they tell a layered story. An individual gains status by mastering analytics, because that skill is valued capital in a field whose rules now favor it. The individual's firm adopts analytics partly to perform well and partly to look #legitimate to peers, regulators, and the market, which is why rivals end up looking alike. And the whole industry sits inside a global structure that channels the raw material of data from the periphery to the core. The same practice, building and using a predictive model, looks different at each level: a path to promotion for the analyst, a badge of legitimacy for the firm, and a transfer of value for the world system. The three levels are linked. Prestige at the micro level fuels adoption at the meso level, and adoption at the meso level feeds extraction at the macro level. The next sections put this combined framework to work. 2.6 How the three theories sit beside mainstream management thinking These three lenses do not float free of the management mainstream; they sit beside the theories students already know and sharpen them. The resource based view treats analytics skill as a valuable, rare, and hard to copy resource, which is close to what Bourdieu means by capital, except that Bourdieu adds the crucial point that the value of a resource depends on the rules of the field and can shift when those rules change. Agency theory worries about whether managers act in the owners' interest; the institutional view adds that managers also act to keep their organization looking proper to outsiders, which can pull against pure efficiency. Contingency theory says the best structure depends on the environment; world-systems thinking widens the environment to the whole planet and asks who set the terms of that environment in the first place. Read this way, the social theories are not a rejection of standard management science but an extension of it. They take the same facts, such as the spread of analytics and the mixed evidence on its payoff, and they explain the parts that the efficiency story leaves over. A student who knows both sets of theories can switch between them, using the efficiency lens to design a good model and the social lens to understand what the model will do to people and power once it is built. That ability to move between explanations, rather than clinging to one, is what marks a mature analyst. There is also a practical reason to combine the lenses. Each theory, used alone, has a characteristic blind spot. The efficiency story alone cannot say why useless practices survive. Bourdieu alone can describe status games but says little about global structure. Institutional theory alone can explain conformity but tends to underplay the real performance gains that analytics sometimes delivers. World-systems theory alone can describe the global imbalance but risks treating firms as helpless. Put together, the strengths of one cover the gaps of another, which is why the paper treats them as a set rather than asking which single theory is correct. The goal is a fuller explanation, not a contest between schools. 3. Method 3.1 Research design This study is an integrative, theory-led review. Its goal is not to test a hypothesis with new primary data but to build a clearer conceptual map by reading existing research through a chosen set of lenses. This design suits the research questions, which ask how power, imitation, and global inequality shape data analytics in management. Those questions are about meaning and structure, and they are best answered by synthesizing across studies rather than by running a single experiment. An integrative review is an accepted approach in management and information systems when the aim is to connect scattered findings and propose a fresh framework, and it is the right tool when a topic is rich in technical studies but thin in social theory. 3.2 Sources and selection The review drew on peer reviewed journal articles and scholarly books from three connected areas: management and organization studies, information systems, and the sociology of technology. The search favored work published within the last five years, so that the picture of analytics practice would reflect current tools and debates, while allowing a small number of foundational texts that define the three theories, since no review of Bourdieu, isomorphism, or world-systems thinking can proceed without them. Search terms combined a technology cluster, including data analytics, big data, datafication, and digital transformation, with a theory cluster, including Bourdieu, capital, field, habitus, institutional isomorphism, coercive pressure, mimetic pressure, normative pressure, world-systems, core and periphery, and data colonialism. Items were kept when they met three conditions: they were peer reviewed or published by a recognized scholarly press, they spoke to both technology and social theory or provided strong evidence on analytics adoption and outcomes, and they were written in English. Purely technical papers with no organizational or social dimension were set aside, since they fall outside the question being asked. The aim was not to count every paper ever written but to assemble a focused and current body of work that lets the three theories be applied with care. 3.3 Synthesis approach The synthesis used a simple thematic coding logic. Each selected source was read and tagged according to which of the three theories it spoke to most directly, and according to the level it addressed: the individual and firm, the industry or field, or the global system. Sources that bridged levels, such as work on #data_colonialism that connects firm behavior to global structure, were tagged for both. The coded material was then organized into the three theoretical streams that structure the analysis section. Within each stream, the paper looks for agreement, tension, and gaps, and states the resulting pattern as a proposition in the findings. Where the evidence pushed back against the critical reading, that pushback was kept rather than smoothed away, because a theory tested only against friendly evidence proves nothing. 3.4 Limits of the method Three limits should be stated plainly. First, an integrative review reflects the choices of the reviewer, including which terms to search and which lenses to apply, so a different set of choices would surface a different picture. Second, the focus on recent and English language sources, while keeping the picture current, underweights older work and scholarship published in other languages, which is itself a small example of the core and periphery dynamic the paper describes. Third, because the study synthesizes rather than tests, its propositions are arguments to be examined in future empirical work, not findings proven by new data. These limits do not undermine the contribution, but they bound it. The paper offers a framework and a set of testable claims, and it invites others to challenge them with evidence. 4. Analysis 4.1 The contest over judgment inside the firm The first thing the combined framework reveals is a quiet contest inside organizations over whose judgment is trusted. Before the rise of data analytics, authority in many firms rested on experience, relationships, and a feel for the business, all forms of capital that took years to build. The arrival of analytics introduces a competing currency. Now the person who can frame a question as a model, gather the data, and produce a clear chart can claim authority quickly, sometimes faster than the veteran who relied on judgment. Consider a concrete case. A regional retail chain has long trusted its store managers to decide what to stock, drawing on their sense of the local community. A new central analytics team builds a demand model that recommends a standard product mix for every store. When the model and a store manager disagree, whose call wins? In many firms the model wins, not because it has been proven more accurate for that store, but because its recommendation arrives wrapped in the authority of data. Through Bourdieu's lens this is a shift in the rules of the field, not just the arrival of a new tool. The forms of capital that win have changed. #cultural_capital in the shape of statistical and coding skill rises in value. The store manager's experiential knowledge, once dominant, is partly displaced. Recent evidence on what makes analytics pay off supports the idea that the human element is decisive: firms succeed less because of the software they buy and more because of the people and culture that surround it (Karaboga et al., 2023; Korherr and Kanbach, 2023). In Bourdieu's terms, the scarce capital is the trained habitus that lets a person turn messy reality into a usable model and then persuade others to act on it. The model alone changes nothing. The model plus a person who can defend it in a meeting changes the balance of power. This contest is rarely framed as a contest. It is usually framed as a move toward objectivity, as if the data simply speaks. That framing is itself a source of power. When a recommendation is presented as the neutral output of a model, it becomes harder to question than a recommendation presented as one manager's opinion. The model carries #symbolic_capital, the authority of apparent objectivity. Bourdieu would point out that the model still rests on human choices, about which data to collect, which variable to predict, and which errors to tolerate, but those choices are hidden behind the clean surface of the result. The analyst who controls those hidden choices holds real power, even as everyone agrees that the firm is simply following the numbers. For the veteran manager, the experience can feel like a loss of voice, and that feeling is not mere resistance to change. It is an accurate reading of a shift in which form of capital the field now rewards. Understanding this helps managers handle the change with more honesty. The question is not only which tool is better but whose knowledge the firm will value, and that is a question about power that deserves to be discussed openly rather than settled silently by the spread of dashboards. 4.2 Why the analytics wave looks the same everywhere The second pattern the framework reveals is the strange sameness of analytics adoption across firms. Walk through the analytics functions of several large competitors and you will find similar tools, similar team structures, similar dashboards, and similar strategy language. A purely technical story struggles to explain this. If each firm independently searched for the best approach, we would expect more variety, since firms differ in size, market, and need. Institutional isomorphism explains the uniformity directly: firms converge because they face the same three pressures, not because they each discovered the same best answer (DiMaggio and Powell, 1983). #mimetic_pressure is especially visible in fast moving markets. When managers are unsure what will work, copying a respected leader feels safer than betting on an untested idea, and so practices spread by imitation rather than by proof. Studies of firms under uncertainty show this imitation at work in digital strategy, with companies modeling their moves on visible front runners. #normative_pressure reinforces the pattern through the steady supply of similarly trained graduates and the shared playbooks of consultancies and professional bodies, so that a common picture of the modern, data driven firm becomes the accepted standard. Research on smaller firms found these two forces, imitation and professional norms, to be the strongest drivers of early adoption, ahead of direct coercion (Osakwe and Ikhide, 2022). #coercive_pressure then locks the pattern in, as regulators demand reporting and powerful partners require certain systems, which is especially clear in public sector digitization driven by national mandates. The most important implication of this analysis is about the gap between adoption and value. If the main reason to adopt analytics were proven performance gains, we would expect adoption to track results closely. Instead, a large share of analytics investments fail to scale into clear value, yet adoption continues to spread. Institutional isomorphism makes sense of this. Part of the reason to hold analytics is to secure legitimacy, to be recognized as a serious modern organization by investors, customers, regulators, and peers. A firm that lacked any analytics function might be judged backward regardless of its actual results, and that judgment carries real cost. So firms adopt partly to perform and partly to belong. This is not an argument that analytics is useless. It is an argument that adoption and usefulness are two different things that the standard story tends to merge. A mature organization can hold both ideas at once: it can use analytics where the evidence shows real benefit, and it can recognize, without shame, that some of its analytics activity is about legitimacy rather than performance. Naming the difference is the first step to spending wisely, because it lets a firm avoid pouring money into tools it adopted mainly to look correct. It also protects the firm from a common trap, in which a project that exists for appearance is judged by the standards of performance, fails that test, and is replaced by another project that exists for the same appearance and fails in the same way. 4.3 The global flow of data and value The third pattern is the one most often missed in management courses, because it sits above the level of the single firm. World-systems theory and the idea of data colonialism direct attention to the global structure within which analytics operates. The raw material of the data economy, the recorded behavior of billions of people, is gathered across the whole world, including heavily in the #global_south, where mobile and platform use has grown rapidly. But the high value activities sit in a small set of core firms and countries: designing the algorithms, owning the platforms, and capturing the revenue (Couldry and Mejias, 2024). This produces a core and periphery structure built from data rather than from cotton or oil, but following the same logic of unequal exchange that Wallerstein described (Wallerstein, 2004). Populations in the periphery generate the behavioral data that trains valuable models, and they use the resulting services, but they rarely own the infrastructure or share in the profit. Work on #data_governance in developing regions describes this imbalance and warns that without change these regions remain rule takers, shaping neither the standards nor the value capture of the systems they feed. The new sociology of digital capital makes a parallel point at the level of the firm and the user, treating individual level data as a resource whose ownership confers advantage, an advantage concentrated among a few large technology companies (Verwiebe and Hagemann, 2024). Seen this way, an analytics success that a core firm celebrates may rest on a transfer of value from periphery populations who receive little in return. The efficiency is real, but it is partly an artifact of who supplies the raw material and who keeps the product. There is also a knowledge dimension to the imbalance. The methods, benchmarks, and published research that define good practice are produced mainly in the core, so even the standards by which analytics is judged carry a core point of view. A periphery firm that wants to be taken seriously must adopt those standards, which deepens its dependence even as it modernizes. This does not make every analytics project a tool of exploitation, and the framework should not be used to dismiss the genuine benefits that data services bring to people everywhere, including in the global south, where digital tools have widened access to banking, health information, and markets. The point is more careful: the global gains from analytics are unevenly distributed by structure, not by accident, and management education should equip students to see that structure rather than to treat the global platform economy as a flat and neutral marketplace. 4.4 Bringing the three levels together The power of the combined framework is that the same practice can be read at three levels at once, and each reading is true. Take a single act: a data team builds a model that predicts which customers will leave and recommends offers to keep them. At the level of the person and firm, this act is a play for capital and power; the analyst who builds it gains standing, and the firm gains a tool that shifts authority toward those who command the data. At the level of the industry, the same act is partly a bid for legitimacy; rivals build similar models, and the practice spreads as much through imitation and professional norms as through proof of profit. At the level of the globe, the same act draws on behavioral data that may have been gathered across borders, and the value it creates flows toward the core. Holding these three readings together is the main intellectual contribution of the paper. The technical literature on #analytics_capability is correct that data can improve decisions, and nothing here denies that. But by reading the same practice through Bourdieu, institutional isomorphism, and world-systems theory, we see that improving decisions is only one of the things analytics does. It also redistributes power inside the firm, manufactures legitimacy across the industry, and channels value across the world. A complete account of data analytics in management has to keep all of these in view at once. 4.5 Counterpoints and the limits of the critical reading A fair analysis must give the other side its due. The critical reading offered here has real limits, and three counterpoints deserve a direct answer. The first counterpoint is that analytics often does pay, and that the focus on legitimacy can be overstated. The evidence on this is genuinely mixed, not one sided. Strong studies show measurable gains in operations, supply chains, and decision quality where analytics is tied to clear choices and supported by a real #data_driven_culture (Wamba et al., 2017; Awan et al., 2021; Karaboga et al., 2023). The honest position is that analytics both creates value and signals legitimacy, and that the balance between the two differs across firms and settings. The critical lens corrects an over optimistic story; it should not replace it with an equally one sided story of pure theater. The second counterpoint is that imitation is not always irrational. Institutional isomorphism can read as if firms copy each other blindly, but copying a proven leader is often a sensible way to manage uncertainty and to learn at lower cost. Sometimes the herd is right. The theory's real claim is narrower and more durable: that the search for legitimacy is an independent force, separate from performance, that can keep practices alive even after they stop paying. That claim survives the counterpoint, because it does not deny that imitation can also be smart. The third counterpoint is that the world-systems reading can flatten real differences and deny agency to the global south. Firms and governments in the periphery are not only victims; many are building their own platforms, writing their own data rules, and bargaining hard with the core. The framework is most useful as a description of structure and starting conditions, not as a claim that the outcome is fixed. Used carelessly, it can become a story in which nothing can change, which is both wrong and unhelpful. Used carefully, it names a real imbalance while leaving room for the agency that is already reshaping it. Keeping these counterpoints in view is what separates analysis from complaint. 5. Findings The analysis yields five findings, stated as propositions so that future research can test them. Each follows from the synthesis above and connects to at least one of the three theories. 5.1 Analytics skill operates as convertible capital The first finding is that the ability to read and use data functions as a form of capital that can be converted into status, authority, and pay. In Bourdieu's terms, it is cultural capital that translates into symbolic capital and then into economic reward. The evidence that the human and cultural side of analytics, rather than the technology itself, drives performance supports this reading, because it shows that the scarce and valued resource is the trained person, not the purchased tool (Karaboga et al., 2023; Korherr and Kanbach, 2023). Proposition one: in organizations that adopt data analytics, individuals and groups who hold analytics skill gain power relative to those who hold only experiential knowledge, and this shift is often experienced as a move toward objectivity rather than as a redistribution of authority. 5.2 Adoption is driven by legitimacy as well as performance The second finding is that firms adopt analytics partly to gain legitimacy and not only to improve results. The persistent gap between heavy analytics investment and limited measurable value, combined with the look-alike spread of tools and structures across rival firms, points to institutional isomorphism rather than independent optimization (DiMaggio and Powell, 1983). Evidence that imitation and professional norms drive early adoption, especially among smaller firms, strengthens this conclusion (Osakwe and Ikhide, 2022). Proposition two: a meaningful share of analytics adoption is explained by coercive, mimetic, and normative pressures, which means that the presence of an analytics function is a weak signal of its usefulness and a stronger signal of the firm's desire to appear modern and legitimate. 5.3 The objectivity of analytics is partly a social claim The third finding follows from the first two. When analytics outputs are presented as neutral facts, that presentation does social work: it shields decisions from challenge and lends them the #symbolic_capital of objectivity. But every model embeds human choices about data, targets, and acceptable error, and those choices carry interests. Proposition three: the perceived objectivity of data analytics is itself a source of power, because it converts contestable human judgments into apparently neutral results, and it tends to favor whoever controls the hidden choices inside the model. 5.4 The global analytics economy reproduces a core-periphery structure The fourth finding lifts the analysis to the world scale. The raw material of analytics is gathered globally, but its high value activities and rewards concentrate in a core of wealthy firms and countries, leaving the periphery to supply data and to consume services it does not own (Couldry and Mejias, 2024; Wallerstein, 2004). Work on #data_governance in the global south documents this imbalance and its political consequences. Proposition four: the global data analytics economy follows a core and periphery pattern of unequal exchange, in which value flows from the regions that generate behavioral data toward the regions that own the infrastructure and models, reproducing older structures of dependency in digital form. 5.5 The three forces operate together, not separately The fifth finding is integrative. The individual contest for capital, the industry race for legitimacy, and the global flow of value are not three separate stories but three levels of one system, and they reinforce one another. The prestige of analytics skill encourages firms to build analytics functions; the spread of those functions normalizes the collection of data at scale; and the scale of collection feeds the global concentration of value. Proposition five: efforts to understand or reform data analytics in management will fail if they address only one level, because the micro, the meso, and the macro forces sustain each other, and a change at one level provokes adjustments at the others. 5.6 Summary of findings Taken together, the findings reframe a familiar topic. The standard view treats data analytics as a neutral capability that good managers adopt to make better decisions. The findings here do not deny that capability, but they surround it with social facts the standard view omits: analytics redistributes power, it is adopted partly for legitimacy, its claim to objectivity is partly social, and its global pattern repeats an old inequality. A management education that teaches only the tool, and not these facts, leaves students unable to explain the world they will actually work in. The propositions are not the end of the inquiry but its beginning, since each one can be turned into a study with measurable variables. 6. Conclusion This paper set out to explain why management turned to numbers so quickly and so widely, and what that turn does to power inside and between organizations. By reading data analytics through Bourdieu, institutional isomorphism, and world-systems theory, it has tried to show that the spread of analytics is not only a technical upgrade but a social and global event with winners and losers. The argument can be summarized in three sentences. Inside the firm, the skill of reading data has become valued capital that shifts authority toward those who hold it, often under the banner of objectivity. Across the industry, firms adopt analytics in look-alike ways partly to secure legitimacy, which is why adoption can run ahead of proof. Across the world, the gains from analytics flow unevenly from a data supplying periphery to a value capturing core, repeating an older pattern of unequal exchange in digital form. None of this denies the real benefits of analytics, which are well documented in specific operational settings. The aim has been to place those benefits inside a fuller picture. The implications differ by audience. For managers, the central lesson is to separate two questions that usually travel together: does this analytics practice improve our decisions, and does it make us look #legitimate? Both can matter, but confusing them leads to wasted investment in tools adopted mainly for show. Managers should also be honest that going data driven is a change in power, not only a change in tools, and should give a fair hearing to the experiential knowledge that analytics tends to displace. A practical step is to ask, for each major model, who made the hidden choices inside it and whose interests those choices serve, so that the authority of the model is earned rather than assumed. For regulators and policymakers, the analysis points to #data_governance as the key lever, especially the question of who owns data, who captures its value, and how the global south can move from rule taker to rule maker. Policies that keep more of the data value chain inside a region, that build local skills, and that set local standards are not only matters of fairness; they are ways of moving a country up the structure that world-systems theory describes. For educators, the message is that teaching the tools of analytics without teaching their social and global context produces technicians who cannot explain the systems they serve. A strong curriculum pairs the model with the theory, so that students can build a dashboard and also ask who gains from it. The study has clear limits, set out in the method. It is a synthesis, not a test, so its five propositions are invitations to research rather than proven results. Future work could put each proposition to the test. Researchers could study whether analytics adoption tracks performance or legitimacy more closely across a large sample of firms. They could trace, inside specific organizations, how authority shifts as analytics functions grow, testing the claim about capital and power directly. And they could measure the global flows of data and value across the core and periphery, putting numbers to the structure that #data_colonialism describes. Comparative studies across rich and poor regions would be especially valuable, since most current research is written from the core and risks reproducing the very imbalance it studies. The broader point is one of balance. Data analytics is neither a miracle nor a trick. It is a powerful set of practices that, like all powerful practices, distributes its benefits unevenly and changes the social order it enters. The job of the management scholar, and of the thoughtful manager, is to use it well while seeing it clearly. Seeing it clearly means holding the technical promise and the social cost in the same view, and refusing the easy comfort of letting the data decide. Hashtags #DataAnalytics #ManagementTheories #BigDataAnalytics #DataDrivenDecisionMaking #OrganizationalTheory #Bourdieu #FieldCapitalHabitus #InstitutionalIsomorphism #WorldSystemsTheory #DataColonialism #DigitalTransformation #DataGovernance #BusinessAnalytics #data_driven_management #analytics_adoption #critical_data_studies #management_research #data_inequality #core_periphery #datafication References Awan, U., Bhatti, S. H., Shamim, S., Khan, Z., Akhtar, P., & Balta, M. E. (2022). The role of big data analytics in manufacturing agility and performance: Moderation-mediation analysis of organizational creativity and of the involvement of customers as data analysts. British Journal of Management, 33(3), 1200-1220. Awan, U., Shamim, S., Khan, Z., Zia, N. U., Shariq, S. M., & Khan, M. N. (2021). Big data analytics capability and decision-making: The role of data-driven insight on circular economy performance. Technological Forecasting and Social Change, 168, 120766. https://doi.org/10.1016/j.techfore.2021.120766 Bourdieu, P. (1986). The forms of capital. In J. G. Richardson (Ed.), Handbook of theory and research for the sociology of education (pp. 241-258). New York: Greenwood Press. Couldry, N., & Mejias, U. A. (2019). The costs of connection: How data is colonizing human life and appropriating it for capitalism. Stanford, CA: Stanford University Press. Couldry, N., & Mejias, U. A. (2024). Data grab: The new colonialism of big data and how to fight back. London: WH Allen. Darach, N., Kim, M. S., Wisesrith, W., & Collins, E. G. (2025). Data analytics and administrative decision-making in nursing management: A systematic review. Journal of Nursing Management, 2025, 4344147. https://doi.org/10.1155/jonm/4344147 DiMaggio, P. J., & Powell, W. W. (1983). The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields. American Sociological Review, 48(2), 147-160. Dorschel, R. (2022). A new middle-class fraction: Tech workers and the transformation of the entrepreneurial self. The Sociological Review, 70(6), 1302-1320. https://doi.org/10.1177/00258172221103015 Karaboga, T., Zehir, C., Tatoglu, E., Karaboga, H. A., & Bouguerra, A. (2023). Big data analytics management capability and firm performance: The mediating role of data-driven culture. Review of Managerial Science, 17(8), 2655-2684. https://doi.org/10.1007/s11846-022-00596-8 Korherr, P., & Kanbach, D. (2023). Human-related capabilities in big data analytics: A taxonomy of human factors with impact on firm performance. Review of Managerial Science, 17(6), 1943-1970. Osakwe, C. N., & Ikhide, J. E. (2022). Institutional isomorphism and social media adoption: A study within the microenterprise context. Aslib Journal of Information Management, 74(6), 989-1006. https://doi.org/10.1108/AJIM-06-2021-0178 Schirone, M. (2023). Field, capital, and habitus: The impact of Pierre Bourdieu on bibliometrics. Quantitative Science Studies, 4(1), 186-208. https://doi.org/10.1162/qss_a_00232 Verwiebe, R., & Hagemann, S. (2024). Bourdieu revisited: New forms of digital capital - emergence, reproduction, inequality of distribution. Information, Communication & Society, 28(11), 1861-1883. https://doi.org/10.1080/1369118X.2024.2358170 Wallerstein, I. (2004). World-systems analysis: An introduction. Durham, NC: Duke University Press. Wamba, S. F., Gunasekaran, A., Akter, S., Ren, S. J., Dubey, R., & Childe, S. J. (2017). Big data analytics and firm performance: Effects of dynamic capabilities. Journal of Business Research, 70, 356-365. https://doi.org/10.1016/j.jbusres.2016.08.009

Business information systems sit at the meeting point of technology, organizations, and markets, and the field has produced a rich set of theories to explain how systems are chosen, used, and judged to be successful. Most of these theories, including the #technology_acceptance_model, the unified theory of acceptance and use of technology, and the information systems success model, focus on the individual user or the single firm. They explain a great deal about adoption and use, but they say less about power, social #inequality, and the global structure within which technology decisions are made. This article offers an integrative conceptual review that brings three sociological frameworks into conversation with mainstream #business_information_systems theory: Pierre Bourdieu's account of field, capital, and habitus; the world-systems perspective associated with Immanuel Wallerstein; and institutional isomorphism as set out by DiMaggio and Powell. Using a structured narrative review of recent and foundational sources, the study asks what each lens adds, where the lenses overlap, and how they can be combined. The analysis shows that user acceptance can be re-read as a product of #digital_capital and #habitus; that firm-level adoption often follows #legitimacy rather than pure efficiency, driven by coercive, mimetic, and normative pressures; and that the geography of software production and data extraction mirrors a #core_periphery hierarchy. The contribution is a three-level framework linking the micro level of users, the meso level of organizational fields, and the macro level of the world economy. The article is written for students and early researchers who want to understand not only how systems are accepted, but why those patterns reproduce advantage and disadvantage. #critical_IS 1. Introduction Business information systems, often shortened to BIS, are the combinations of people, processes, data, and technology that organizations use to collect, store, move, and act on information. They include enterprise resource planning suites, customer relationship management platforms, accounting and supply chain systems, business intelligence dashboards, and the growing layer of cloud and #artificial_intelligence services that now sits underneath much of corporate work. Because these systems shape how firms compete and how employees spend their days, scholars have spent decades trying to explain how they are chosen, why people use them or resist them, and what makes one system a success and another a costly failure. The field is applied in spirit, but it has always depended on theory, because managers and researchers need more than a list of past cases; they need ideas that travel from one setting to the next and that predict what will happen when a new system meets a new group of people. Out of that effort came a recognizable family of theories. The #technology_acceptance_model, introduced by Davis (1989), proposed that two beliefs, perceived usefulness and perceived ease of use, drive whether a person will accept a new tool. The unified theory of acceptance and use of technology, or #UTAUT, gathered competing models into a single framework built around performance expectancy, effort expectancy, social influence, and facilitating conditions, with personal characteristics treated as moderators (Venkatesh, Morris, Davis, and Davis, 2003). On the question of whether a system actually delivers value, the #DeLone_McLean model linked system quality, information quality, and service quality to use, user satisfaction, and net benefits (DeLone and McLean, 2003). These models remain the backbone of teaching and research, and reviews continue to show that they are applied across sectors and countries, often in combination with one another (Xue, Rashid, and Ouyang, 2024). A student who opens almost any introductory module on information systems will meet this family early and often, and for good reason: the models are clear, they generate testable predictions, and they have been confirmed many times. The strength of this tradition is also its limit. The dominant models are mostly behavioral and cognitive. They treat the user as a reasoning individual who weighs costs and benefits, and they treat the firm as a rational actor that chooses the best available tool. That focus has produced precise, testable claims, but it tends to leave three things in the background. First, it under-theorizes power and #inequality, meaning the way that skills, resources, and recognition are unevenly spread among users and organizations, and the way that some actors set the terms that others must accept. Second, it treats adoption as if firms decided in isolation, when in practice they watch one another closely and often copy the moves of peers and leaders. Third, it rarely looks beyond the single organization to the global economy in which software is written in some places, sold from others, and fed by data drawn from almost everywhere. A student who learns only the standard models can predict whether a dashboard will be used in a given office, but cannot easily explain why entire regions remain dependent on platforms built elsewhere, or why two firms with identical needs adopt the same system for very different reasons, or why a technically sound system can still be regarded as a failure while a modest one is celebrated. A short example makes the gap concrete. Imagine three mid-sized firms in three different countries that each decide, in the same year, to move their accounting and operations onto the same widely used cloud platform. The standard models would explain each decision through perceived usefulness, expected performance, and the quality of the system, and they would do so well. Yet they would struggle to explain why all three chose the same platform in the same year, why the staff in one firm embraced it while the staff in another quietly worked around it, and why the firm in the wealthiest country ended up owning valuable analytics built on its own data while the firm in the poorest country found itself renting capabilities and handing its data to a provider it could not influence. Each of these puzzles points to a layer the acceptance models hold constant: the #social_influence of peer firms, the unequal #digital_capital of employees, and the global position of each company. Naming those layers is the work of the sociological lenses introduced below. These gaps are not signs that the mainstream models are wrong. They are signs that the models answer some questions and leave others to neighboring disciplines. Information systems has always been a borrowing field, taking ideas from psychology, economics, computer science, and management. This article argues that it should borrow more deliberately from sociology, and it shows what happens when it does. The aim is not to replace the acceptance and success models but to set them inside a larger picture that includes the social structures they usually hold constant. This article therefore reads #business_information_systems theory through a sociological lens. It asks what is added when three influential social theories are placed alongside the established models. The first is the work of Pierre Bourdieu, whose concepts of field, capital, and habitus explain how people carry unequal resources and dispositions into any setting, and how those differences quietly shape what feels natural and easy to each person (Bourdieu, 1986; Schirone, 2023). The second is world-systems analysis, which divides the global economy into a core, a semi-periphery, and a periphery linked by unequal exchange, and which treats today's patterns of wealth and dependence as the outcome of a long history rather than a passing accident (Wallerstein, 1974). The third is institutional isomorphism, the idea that organizations in a shared field come to resemble one another over time through coercive, mimetic, and normative pressures (DiMaggio and Powell, 1983). Three questions guide the study. What does each sociological lens reveal about technology adoption, use, and success that the standard models leave implicit? Where do the three lenses overlap, and where do they pull against one another? And can they be combined into a single framework that connects the user, the organization, and the world economy without losing the precision that makes the mainstream models useful? The contribution is threefold. The article maps how recent research already imports these ideas into the study of digital organizations; it re-reads the classic BIS constructs in their light, showing how familiar variables look different once power and structure are added; and it proposes an integrated, three-level framework that students and researchers can use to design richer studies. The remainder proceeds as follows. Section 2 sets out the theoretical background and the three lenses in detail. Section 3 describes the review method and its limits. Section 4 analyzes BIS phenomena through each lens, including the often-ignored case of resistance and non-use. Section 5 presents the synthesized findings as a set of propositions and a layered framework with implications for research, teaching, and practice. Section 6 concludes. 2. Background and Theoretical Framework 2.1 What counts as theory in business information systems A theory is a set of connected ideas that explains why something happens and predicts what will happen under stated conditions. In #business_information_systems, theory has played several roles, and it helps students to see them clearly. Some theories are borrowed from psychology and economics and then adapted to technology, such as the acceptance models that descend from earlier work on reasoned action and planned behavior. Others are native to the field, growing out of attempts to define what system success even means, since a system can be technically excellent and still ignored, or technically weak and still loved. Still others are imported from sociology and organization studies to explain group and firm behavior that individual psychology cannot reach. A useful way to organize these theories is by the level of social life they target. Micro-level theories explain individual users, their beliefs, and their actions. Meso-level theories explain organizations and the fields they belong to, including how firms relate to competitors, partners, regulators, and professions. Macro-level theories explain industries, nations, and the global system as a whole. The mainstream BIS canon is heavily weighted toward the micro level. Acceptance and satisfaction live inside the head of a single user, and even when social factors enter, they usually do so as one variable among many. This article argues that the meso and macro levels are where the sociological lenses do their most useful work, because that is where power and structure are most visible and where the standard models have the least to say. 2.2 The acceptance and success family The acceptance tradition begins with the claim that beliefs predict behavior. In Davis's (1989) model, a person adopts a system when they believe it will improve their performance and that it will not be too hard to learn and use. Later work showed that these two beliefs absorb the influence of many other factors, which is part of why the model has been so widely copied. UTAUT extended the tradition by drawing several competing models together and by adding social influence, meaning the felt expectations of important others, and facilitating conditions, meaning the support and resources that make use possible (Venkatesh and others, 2003). It also treated factors such as age, gender, and experience as moderators that strengthen or weaken the main effects rather than as direct causes. The acceptance models have proved remarkably durable. A systematic review of UTAUT in higher education found that performance expectancy is consistently the strongest predictor of behavioral intention, that the technology acceptance model is the framework most often combined with it, and that survey methods and structural equation modeling dominate the literature (Xue and others, 2024). That same review noted a narrowness worth flagging: studies cluster on certain regions and certain kinds of participant, which means the evidence base itself is unevenly distributed, a point that will return when world-systems analysis enters the discussion. The information systems success model takes a different angle. It asks not whether a system is used but whether it delivers value once it is, and it has been revised and integrated with acceptance models many times since its first statement (DeLone and McLean, 2003). In its updated form it connects three quality dimensions, system quality, information quality, and service quality, to intention to use and actual use, to user satisfaction, and finally to net benefits, with feedback loops running back through the model. It is a more organizational model than the acceptance family, because net benefits can be measured at the level of the firm, yet it still rests on individual perceptions of quality and satisfaction. These models share an assumption worth naming. They locate the explanation inside the individual, in beliefs, expectations, and satisfaction. Where the social world enters, as in the social influence construct of UTAUT, it is usually reduced to a single variable measuring whether important others approve. The richer questions of which others count, why their approval carries weight, and how that approval reflects deeper structures of status and resources are left for other disciplines to answer. This is precisely the space the sociological lenses occupy, and it is why placing them beside the acceptance and success models is productive rather than merely critical. 2.3 Institutional theory and isomorphism Institutional theory shifts attention from the individual to the organization and its environment. Its central insight is that organizations do not survive on efficiency alone; they also need #legitimacy, the widely shared sense among stakeholders that the organization is doing the proper, expected, and respectable thing. A firm that is efficient but seen as deviant may lose customers, partners, and the goodwill of regulators, while a firm that conforms to expectations earns trust and access even when its internal operations are imperfect. DiMaggio and Powell (1983) argued that as a field matures, the organizations within it grow more alike, a process they named #institutional_isomorphism, and they identified three mechanisms that drive it. Coercive isomorphism comes from pressure exerted by powerful actors such as governments, regulators, or dominant customers and from the cultural expectations of the wider society. A firm adopts a practice because it must, or because the cost of not doing so is too high. Mimetic isomorphism happens when organizations face uncertainty and respond by copying peers they regard as successful or legitimate, treating the choices of others as a shortcut through a problem too complex to solve from scratch. Normative isomorphism spreads through professions, university training, consultancies, and shared standards that define the right way to operate, so that members of a field come to hold similar ideas about good practice simply because they were taught the same things by the same kinds of people. This framework has found a strong second life in the study of digital organizations. Research on digital transformation treats the adoption of new systems as an institutional response, in which firms align with industry and regional expectations to protect their legitimacy rather than simply to chase return on investment (Hinings, Gegenhuber, and Greenwood, 2018). A recent empirical study of more than two thousand non-information-technology firms in China found that both industry-level and region-level digitalization pushed companies toward #digital_mimetic_isomorphism, with firms imitating either similar peers or visibly successful leaders depending on the particular institutional pressures they faced (Chen, Ma, and Zhou, 2024). The study also found that the interaction of these pressures changed the target of imitation, encouraging firms in highly digitalized industries and regions to copy successful leaders rather than near-identical peers. For BIS, this body of work shifts the central question from "is this the best system" to "what does adopting this system signal, and whom are we copying when we adopt it." 2.4 Bourdieu: field, capital, and habitus Pierre Bourdieu offered a way to connect individual behavior to social structure without reducing one to the other. His thought is broader than any short summary, but a small set of concepts forms the core that scholars most often use (Schirone, 2023). A #field is a structured social space with its own rules, stakes, and hierarchies, such as the field of software engineering, the field of corporate management, or the field of academic research. Each field has its own logic about what counts as valuable and what counts as a winning move. Capital is the set of resources that give an actor advantage within a field. Bourdieu (1986) distinguished economic capital, meaning money and property; cultural capital, meaning knowledge, credentials, tastes, and the ease that comes from familiarity; and social capital, meaning networks and durable relationships. He also wrote of symbolic capital, the recognition and prestige that other forms of capital take on when they are seen as legitimate. #Habitus is the durable set of dispositions, the feel for the game, that people acquire through their upbringing and experience and then carry into every field they enter. Habitus shapes what a person finds natural, comfortable, and obvious, often below the level of conscious choice. To these concepts Bourdieu added doxa, the taken-for-granted assumptions that members of a field treat as simply the way things are, and he stressed that the different forms of capital can be converted into one another, so that economic capital can buy the education that yields cultural capital, and cultural capital can open the networks that yield social capital. A growing body of work extends this triad to the digital world by proposing #digital_capital as a distinct resource. Verwiebe and Hagemann (2025) argue that individually held, economically useful data can be understood as the basis of a new form of capital that shapes the strategies of actors across many fields and that reproduces existing inequalities rather than dissolving them. Their account treats the digital arena as a field dominated by a small number of very large technology firms, with subfields such as software engineering, prosumption, and social media content creation, each with its own habitus, stakes, and conflicts over scarce resources. Other writers in this stream treat digital capital as accumulated competence and access built up over a lifetime of using information and communication technologies. For BIS, Bourdieu's value is that he turns the flat construct of perceived ease of use into a layered question: who arrives at a new system already holding the right skills, credentials, and dispositions, and who arrives without them, and how does a workplace reward or punish that difference. 2.5 World-systems theory World-systems analysis lifts the level of explanation to the global economy as a whole. Wallerstein (1974) described the modern world as a single capitalist system that took shape from the sixteenth century onward and that is divided into three zones joined by a global division of labor. #Core countries hold the high-skill, capital-intensive, high-profit activities and the strong institutions that protect them. Periphery countries supply raw materials and low-cost labor and capture little of the value they help create, while their development is shaped by decisions made elsewhere. The semi-periphery sits between the two, sharing features of both, and it often serves as a buffer that absorbs pressure and offers the appearance of mobility within a system that mostly reproduces itself. The zones are bound together by #unequal_exchange, a division of labor that steadily channels surplus toward the core and reinforces the existing hierarchy across long cycles of expansion and decline. Applied to digital technology, the model is uncomfortably apt. The design of dominant operating systems, cloud platforms, advanced semiconductors, and frontier models is concentrated in a small number of core regions and firms, while a great many countries and companies consume these systems and supply the data and the lower-paid labor of annotation, moderation, and assembly that keep them running. Scholars writing on platform capitalism and on data colonialism describe how data are extracted from populations everywhere and turned into value that accumulates largely in the core, in a pattern that echoes the older extraction of raw materials but now applies to a resource generated by ordinary digital life (Couldry and Mejias, 2019; Srnicek, 2017; Van Dijck, Poell, and de Waal, 2018). Work on digital economics has shown how the falling cost of moving and processing data lowers some barriers while raising others, since the firms that already hold data and infrastructure gain advantages that compound over time (Goldfarb and Tucker, 2019). The #digital_divide, often discussed as a simple gap in access or skills, looks from this angle like a durable structure of dependence rather than a temporary lag that better connectivity will erase. For BIS, world-systems theory raises questions that firm-level models cannot reach: who owns the platform a company depends on, where the value of its data finally settles, and how the choices open to a peripheral firm are constrained by infrastructure it neither owns nor controls. 2.6 Rationale for synthesis The three lenses are not rivals so much as different magnifications of a single picture. Bourdieu works best at the micro and meso levels, explaining how unequal resources and dispositions shape behavior within fields and how advantage is carried from one setting to the next. Institutional isomorphism works at the meso level, explaining why organizations in a field converge on similar practices and similar systems. World-systems analysis works at the macro level, explaining how fields and firms are positioned within a global hierarchy that predates any individual decision. Read together, they promise a layered account of #business_information_systems that the standard models, powerful as they are at the micro level, cannot supply on their own. They also share a common concern with how patterns persist, which is why the synthesis can do more than list three separate critiques. The rest of the article develops that layered account and shows how the pieces connect. 3. Method 3.1 Research design This study is an integrative conceptual review. Rather than testing hypotheses with new data, it gathers, organizes, and reinterprets existing theory and evidence in order to build a new framework. This design suits questions that are about meaning and structure rather than measurement, and it is well established in fields where the goal is to connect bodies of work that usually stay apart from one another. The review is narrative rather than fully systematic, which means it aims for a defensible and transparent reading of the relevant literature rather than an exhaustive count of every paper ever published on the topic. The choice is deliberate, because the contribution lies in connecting frameworks and reinterpreting constructs, work that depends on close reading and judgment rather than on tallying frequencies. Three questions framed the review, as set out in the introduction: what each lens adds, where the lenses overlap or conflict, and how they combine into a single framework. 3.2 Search strategy Sources were gathered through targeted searches of scholarly databases and publisher platforms covering management, information systems, and sociology. Search terms combined a #BIS_theory cluster, including technology acceptance, unified theory of acceptance and use of technology, information systems success, and digital transformation, with a sociological-theory cluster, including Bourdieu, field, habitus, digital capital, institutional isomorphism, coercive, mimetic, and normative pressure, world-systems, core and periphery, platform capitalism, and data colonialism. Searches were conducted in English. The reference lists of the most relevant articles were scanned to find further sources, a technique known as backward snowballing, which is especially useful for tracing how a borrowed framework has spread into a new field. 3.3 Inclusion and exclusion criteria Two kinds of source were treated as eligible. The first was foundational theory, meaning the original or canonical statements of the frameworks under study, regardless of their age, because a faithful account of any theory requires returning to the source rather than relying on second-hand summaries. The second was recent scholarship, meaning peer-reviewed articles and books published in roughly the last five years that apply or extend these frameworks in digital and organizational settings. Priority went to recent sources for application and evidence and to original sources for definition, so that the article rests on current research where currency matters and on primary statements where fidelity matters. Items were excluded if they could not be retrieved in full, if they were promotional rather than scholarly, or if they invoked a framework only in passing without engaging it in any depth. 3.4 Analysis and synthesis The selected sources were read closely and coded by theme in two passes. The first pass tagged each source by the BIS phenomenon it addressed, such as user acceptance, firm adoption, system success, resistance, or global structure. The second pass tagged each source by the sociological mechanism it invoked, such as capital, habitus, field, legitimacy, isomorphic pressure, or core-periphery position. Crossing the two sets of tags produced a matrix that showed clearly where the lenses had already been applied to BIS phenomena and, just as importantly, where they had not, which is where the article's own contribution concentrates. The synthesis then moved from description to construction, drawing the threads together into a set of propositions and a layered framework, which are presented in the findings. 3.5 Quality, reflexivity, and limitations Several limits should be stated plainly. A narrative review reflects the judgment of its author in selecting and weighting sources, and a different reviewer might reasonably emphasize different works and reach a somewhat different synthesis. The focus on English-language scholarship is itself a #core_periphery bias of exactly the kind the article studies, and it almost certainly under-represents work published in other languages and regions, including the very settings that world-systems analysis would predict are least visible in the dominant journals. The frameworks chosen are influential but not the only options available; actor-network theory, the resource-based view, structuration theory, and critical realism would each open different questions and might temper or extend the conclusions reached here. Finally, a conceptual framework is a tool for thinking, not a finding about the world; its value will depend on the empirical studies it goes on to inform. These limits are revisited in the conclusion, where they become an agenda for future work rather than only a list of caveats. 4. Analysis 4.1 User acceptance re-read through capital and habitus The acceptance models explain technology use as the outcome of individual beliefs. Bourdieu lets us ask where those beliefs come from in the first place. Consider perceived ease of use, the belief that a system will not be too hard to operate. Two employees facing the same new analytics platform can hold very different beliefs about it, and the difference is rarely random. An employee who grew up with computers, who studied a quantitative subject, and who works among data-literate colleagues arrives with substantial #digital_capital and with a #habitus that makes the platform feel familiar from the first click. The interface seems intuitive precisely because it matches dispositions that are already in place. A colleague without that background experiences the same screens as foreign and demanding, and reports low ease of use not because the design is poor but because the gap between the system and the habitus is wide (Verwiebe and Hagemann, 2025). What the model faithfully records as a difference in perception is, on this reading, the visible surface of an underlying difference in accumulated capital. The social influence construct in UTAUT can be reinterpreted in the same spirit. The model treats social influence as the degree to which a person feels that important others want them to use a system. Bourdieu would ask which others count, and why their wishes register as influence at all. In any workplace field, some actors hold more symbolic capital, the recognition and standing that make their endorsement carry weight beyond their formal authority. When a respected senior engineer praises a new tool, the effect is not merely social pressure in the abstract; it is the conversion of that person's standing in the field into momentum for adoption, while the identical words from a low-status colleague would move no one. The model's single variable captures the outcome but hides the structured contest over recognition that produces it. This reframing matters for practice as much as for theory. If acceptance reflects capital and habitus rather than fixed features of the software, then training and support are not neutral add-ons but mechanisms that redistribute digital capital within the organization. A firm that invests heavily in helping its less data-literate staff build skills is, in effect, changing the distribution of capital in its internal field, and so changing who finds the system easy and who feels left behind. Acceptance, in this light, becomes something an organization can actively shape by addressing inequality, not only by polishing the interface. It also explains a pattern that frustrates many implementation teams: the same training that lifts confident users to mastery can leave anxious users further behind, because those who already hold capital are best placed to absorb still more, a dynamic that the next sections will recognize at higher levels too. 4.2 Firm adoption re-read through institutional isomorphism When the unit of analysis shifts from the user to the firm, institutional isomorphism becomes the sharper tool. The standard story of system adoption is one of rational choice: a firm assesses its needs, compares the options, calculates the likely return, and selects the system that promises the best value. Institutional theory complicates this without rejecting it, by pointing out that firms also adopt systems in order to look legitimate, to satisfy powerful partners, and to avoid the danger of standing apart from their peers in ways that invite suspicion (DiMaggio and Powell, 1983; Hinings and others, 2018). The three mechanisms map cleanly onto common BIS decisions, and naming them helps students recognize patterns that otherwise look like noise. Coercive pressure appears when a large customer or a regulator requires suppliers to adopt a particular electronic data interchange standard, a security framework, or a reporting system; the supplier complies in order to keep the relationship and the license to operate, whatever the internal cost. Mimetic pressure appears when a firm, genuinely unsure which enterprise system will pay off, simply chooses what comparable or admired competitors have already chosen, treating their decision as a credible signal in the face of uncertainty. Normative pressure appears when consultants, professional bodies, and the shared training of business school graduates carry common ideas about best practice, so that adopting a market-leading platform becomes the expected and professional thing to do, almost independent of the specific case. Recent evidence supports this reading and sharpens it. In the study of Chinese firms by Chen, Ma, and Zhou (2024), both industry digitalization and regional digitalization increased the tendency of companies to imitate others in their digital strategy, and the chosen targets of imitation shifted between similar peers and successful leaders depending on the mix of institutional pressures at work. The authors frame digital transformation as a search for #legitimacy under uncertainty, not only as a search for efficiency, and they show empirically that the institutional environment, not just internal calculation, predicts who copies whom. The same logic helps explain otherwise puzzling patterns that BIS researchers know well: the wave-like spread of particular enterprise suites through an industry, the sudden rush to acquire #artificial_intelligence capability once a few visible leaders announce it, and the stubborn survival of expensive systems that never delivered their promised returns but that everyone in the field now expects a serious firm to operate. From an isomorphic angle these are not failures of rationality at all; they are rational pursuits of legitimacy within a shared field, where being seen to conform can matter more than any internal metric. 4.3 System success re-read as a field-relative judgment The information systems success model treats success as a measurable outcome assembled from quality dimensions, use, satisfaction, and net benefits (DeLone and McLean, 2003). Bourdieu and institutional theory together suggest that success is also a social judgment made within a field, and that this judgment can come apart from any purely technical measure. A system can score well on system quality and information quality and still be judged a failure if it does not confer the standing the organization was seeking; conversely, a technically modest system can be celebrated as a triumph because it signals membership in the right club and aligns the firm with admired leaders. This is visible whenever a firm announces a flagship digital initiative with fanfare. The announcement does real work in the field regardless of the system's eventual performance, because it converts spending into symbolic capital, the public appearance of being modern, capable, and forward-looking. Net benefits, in the model's own language, therefore include benefits that are reputational and relational, not only operational, and these can be substantial even when the operational gains are thin. Recognizing this does not invalidate the success model; it locates the model inside a field where the meaning of success is contested and partly social, and where different audiences keep different scorecards. For students, the practical lesson is to ask, when evaluating any system, not only whether it works in a technical sense but for whom its success counts, in whose eyes, and against which standard, since the answer often explains why an organization persists with a system that the numbers alone would condemn. 4.4 Resistance and non-use re-read through power Most BIS theory is built to explain adoption and use, and it treats resistance as a problem to be overcome, a friction in an otherwise smooth path toward acceptance. The sociological lenses suggest that resistance and non-use are meaningful in their own right and that they often express the distribution of power rather than a simple deficit of understanding. When workers resist a new monitoring system, the standard models may record low perceived usefulness, but a Bourdieusian reading sees a defense of position by actors whose existing capital, their tacit know-how and informal standing, is threatened by a system that makes their work legible and measurable to managers. The resistance is not irrational; it is a strategy in a field where the new system would redistribute advantage. Institutional theory adds that non-adoption can itself be a bid for legitimacy in fields where conformity to a different set of norms matters more, while world-systems analysis reminds us that some firms and regions cannot adopt even when they wish to, because the necessary infrastructure, skills, or affordable access are concentrated elsewhere. What looks like a choice not to use is sometimes the absence of a real option. Reading resistance and non-use through power turns them from obstacles into evidence, showing where a system would shift the balance of advantage and who stands to lose. This is a part of the picture that adoption-focused models, by design, tend to miss. 4.5 The global structure of systems re-read through world-systems theory The firm-level lenses still treat the organization as the largest relevant unit. World-systems analysis insists that the organization sits inside a global hierarchy that shapes which choices are even available to it (Wallerstein, 1974). Three features of the contemporary technology economy fit the model with striking ease. The first is the geography of value creation. The design of dominant platforms, cloud infrastructure, advanced semiconductors, and frontier models is concentrated in a few core regions, while a great many firms and countries are users and renters of that infrastructure rather than owners of it. A peripheral firm can adopt the same cloud services as a core competitor, but it does so on terms set elsewhere, paying continuing rent to platform owners and depending on infrastructure it can neither control nor fully inspect. Its information systems strategy is built on foundations laid by others, and a change in pricing or policy at the core can reshape its options overnight. The second is the flow of data. The literature on data colonialism describes how data are drawn from people and organizations across the world and converted into value that accrues mostly to large firms in the core (Couldry and Mejias, 2019; Van Dijck and others, 2018). This mirrors the older extraction of raw materials from the periphery, now applied to a resource produced everywhere by ordinary digital activity. The decisive point is not that data move physically across borders but that the capacity to refine data into models, products, and profit is unevenly held, which reproduces the #unequal_exchange at the heart of the theory. A firm may generate enormous quantities of data and still capture little of their value if the means of turning data into advantage belong to a platform on which it depends. The third is the global division of digital labor. The work that keeps platforms running, including data labeling, content moderation, customer support, and the lower tiers of software services, is often performed in semi-peripheral and peripheral regions at lower pay and with less recognition, while the higher-value architecture, ownership, and decision rights remain in the core. For BIS, this reframes the #digital_divide. Rather than a temporary gap that better access alone will close, the divide appears as a structural feature of a system in which core and periphery occupy different and durable positions. A firm's information systems strategy is therefore shaped not only by its budget and its institutional field but by where its country and its industry sit in the world economy, and the same decision can carry very different consequences depending on that position. 4.6 Cross-cutting themes: power, legitimacy, and reproduction Reading across the analysis, three themes recur and tie the lenses together. The first is power, which the standard models treat thinly and which the sociological lenses treat as central. Power appears as the unequal capital of users, the coercive weight of dominant firms and states, and the structural advantage of the core, and in each case it shapes outcomes that the acceptance and success models record only as their visible effects. The second is #legitimacy, the social license that drives much firm behavior and that connects the meso level of institutional fields to the micro level of individual recognition and the macro level of national standing. The third is #social_reproduction, the tendency of all three structures to reproduce themselves over time. Capital tends to attract more capital, since those who hold it are best placed to gain more; isomorphic fields tend to lock in the practices of early leaders, since later entrants copy what is already established; and the world-system tends to keep the core in the core, since ownership of platforms and data compounds advantage. Each lens, in its own way, explains why advantage in #business_information_systems is sticky, and why the patterns the standard models measure at a single moment tend to persist across time. 5. Findings The analysis can be condensed into a set of findings, stated as propositions, and a layered framework. The propositions are offered as ideas for future empirical work rather than as tested results, and each connects a familiar BIS construct to a sociological mechanism that gives it depth. First, on user acceptance, the review finds that the acceptance constructs are best understood as surface expressions of deeper resources. Proposition one holds that perceived ease of use varies with a user's #digital_capital and #habitus, so that interventions which redistribute capital, such as targeted and sustained training for less data-literate staff, will change acceptance more than interface changes alone. This connects the micro-level models directly to questions of #inequality that they usually leave out, and it suggests that some persistent acceptance gaps are really capital gaps wearing a different name. Second, on firm adoption, the review finds that legitimacy is a driver at least as strong as efficiency. Proposition two holds that the spread of a given system through an industry follows the three isomorphic pressures, with coercive pressure dominating in regulated and buyer-driven settings, mimetic pressure dominating under uncertainty, and normative pressure dominating where professions and consultancies are influential. The empirical pattern reported by Chen, Ma, and Zhou (2024) is consistent with this and invites replication across other economies and sectors, especially outside the settings that already dominate the literature. Third, on system success, the review finds that success is partly a field-relative social judgment. Proposition three holds that measured net benefits and perceived success can diverge, and that the size of the gap is explained by the symbolic capital a system confers within its field. Studies of system success would gain from measuring reputational and relational benefits alongside operational ones, since the two can move in opposite directions and the organization's behavior often tracks the social scorecard rather than the technical one. Fourth, on resistance, the review finds that non-use carries information about power. Proposition four holds that resistance is concentrated among actors whose existing capital a new system would devalue, and that genuine non-adoption is sometimes the absence of a real option rather than a considered choice. Treating resistance as evidence rather than as friction would let researchers map where systems redistribute advantage and who is positioned to lose. Fifth, on global structure, the review finds that a firm's options are bounded by its position in the world-system. Proposition five holds that peripheral and semi-peripheral firms face a narrower and more dependent set of choices, paying platform rents and supplying data and labor on terms set in the core, so that identical adoption decisions carry different consequences depending on position. This reframes the #digital_divide as structure rather than lag and predicts that simple measures of access will explain less than measures of ownership and control. Sixth, and cutting across the others, the review finds a common logic of reproduction. Proposition six holds that the three levels reinforce one another: a user's capital shapes their standing within a firm; a firm's field shapes which systems it can legitimately adopt; and the world-system shapes which firms can own rather than rent the underlying technology. Advantage compounds across levels, which is why interventions aimed at a single level often disappoint. These findings assemble into a three-level framework that is the article's central contribution. At the micro level sit users, described by capital and habitus, where the acceptance and success models do their familiar and valuable work but gain explanatory depth from Bourdieu. At the meso level sit organizations and their fields, described by #institutional_isomorphism and the contest for legitimacy, where adoption decisions and the social judgment of success are actually made. At the macro level sits the world-system, described by core, semi-periphery, and periphery and by unequal exchange, where the ownership of platforms and the flow of data and labor are settled long before any single firm deliberates. The levels are joined by two bridges. Capital is the bridge between the micro and meso levels, because individual resources translate into organizational standing and organizational position feeds back into individual opportunity. Position is the bridge between the meso and macro levels, because a field's practices are shaped by where its members sit in the global economy and because the global economy is in turn maintained by the routine decisions of countless fields. Read downward, the framework shows how global structure constrains firms and users; read upward, it shows how the everyday acceptance choices of individual users aggregate into the very patterns that keep the structure in place. A single worked illustration shows how the levels interlock. Suppose a logistics firm in a semi-peripheral economy adopts an artificial intelligence routing system because its largest client, a core-based retailer, now requires it of all suppliers. At the macro level this is a #coercive_pressure transmitted along a global supply chain, and the firm has little real choice but to comply. At the meso level the adoption earns the firm #legitimacy with its client and with peers who watch the move and may soon copy it, a textbook case of pressure rippling outward through a field. At the micro level the system lands unevenly: dispatchers with strong #digital_capital adapt quickly and gain influence, while older staff whose value lay in route knowledge built over years find that knowledge made redundant, and some resist. The data the system generates flow back to the platform provider in the core, which refines them into products the semi-peripheral firm will later rent. One adoption decision thus reaches across all three levels at once, and an analyst who watched only the dispatchers, or only the firm, or only the supply chain would miss most of what occurred. The framework's purpose is to keep all three in view together. For research, the framework suggests studies that deliberately cross levels rather than staying within one. A study might link measures of user digital capital to firm-level adoption outcomes, testing whether organizations rich in such capital adopt and absorb systems more readily. A comparative study might trace the same system's diffusion across core, semi-peripheral, and peripheral economies, asking whether the isomorphic pressures and the consequences of adoption differ by position. A mixed-method study might combine the precision of acceptance surveys with interviews that surface the capital and power dynamics the surveys cannot see. In each case the value of the framework is that it tells researchers where to look for the explanations that single-level models leave out. For teaching, the framework offers students a single map on which the familiar models and the critical theories can both be placed, so that #technology_acceptance, institutional isomorphism, and world-systems analysis are seen as complementary layers rather than competing camps. A student who learns the map can move comfortably between explaining why one clerk dislikes a new system and explaining why a whole region depends on platforms built abroad, recognizing both as parts of one connected picture. For practice, the framework carries several warnings that managers can act on. A system chosen mainly for legitimacy may underperform on the operational measures that ultimately matter, so leaders should distinguish the two kinds of benefit they are buying. Acceptance gaps often signal unequal capital rather than poor design, which means the remedy is investment in people, not only in software. Resistance is worth reading rather than crushing, because it marks where a system will shift advantage and where careful change management will be needed. And dependence on core-owned platforms is a strategic exposure rather than a mere procurement detail, one that deserves a place in risk planning alongside more familiar threats. 6. Conclusion Business information systems theory has given the field a precise vocabulary for explaining how individuals accept technology and how organizations judge it successful. This article has argued that the vocabulary is strong at the micro level and noticeably thinner at the meso and macro levels, where power, #inequality, and global structure decide much of what actually happens. By placing three sociological frameworks alongside the standard models, the review has shown that user acceptance can be re-read as a matter of #digital_capital and habitus, that firm adoption often follows legitimacy through coercive, mimetic, and normative pressure, that system success is partly a field-relative social judgment, that resistance carries information about power, and that the geography of platforms, data, and labor follows a durable #core_periphery pattern. The integrated three-level framework links these insights, connecting users through capital to organizations and organizations through position to the world economy, and it identifies social reproduction as the logic that runs through all three levels and explains why advantage tends to persist. The contribution is conceptual rather than empirical. The article does not claim to have measured any of these relationships; it has organized existing theory and recent evidence into a framework that future studies can put to the test. Its limits follow directly from its method. The choice and weighting of sources reflect the author's judgment, the focus on English-language work carries its own core-periphery bias, and the three frameworks, influential as they are, are not the only ones available. Other lenses, including actor-network theory, structuration theory, and the resource-based view, would surface different questions and are well worth pursuing in parallel, and a fuller account would draw on scholarship in many languages and from many regions, including those that the dominant journals tend to overlook. Several lines of future work follow from the argument. Empirical studies could operationalize digital capital at the level of individual users and test whether it predicts acceptance beyond the standard belief measures. Comparative work could examine whether the isomorphic patterns found in one economy hold across very different institutional settings, and whether the targets of imitation shift as the theory would predict. Cross-level designs could trace how a single platform diffuses through core, semi-peripheral, and peripheral firms and with what consequences for value, dependence, and the distribution of work. And critical, design-oriented research could ask how organizations might widen the distribution of digital capital among their people and reduce their dependence on core-owned infrastructure, turning the diagnosis offered here into practical strategy rather than only commentary. For students approaching #business_information_systems for the first time, the closing message is simple. The classic models are worth learning well, because they capture real and measurable patterns of adoption and success that any serious analyst needs to recognize. But systems are chosen and used by people and organizations who carry unequal resources, who watch and copy one another, and who sit at different points in a global hierarchy they did not design and cannot easily escape. Holding both pictures at once, the technical and the social, the individual and the structural, is what it means to understand information systems as they actually work in the world. #IS_theory Hashtags #Business_Information_Systems #BIS_Theory #Information_Systems_Theory #Technology_Acceptance_Model #UTAUT #DeLone_McLean_Model #Institutional_Isomorphism #Bourdieu #World_Systems_Theory #Digital_Capital #Digital_Transformation #Core_Periphery #Critical_IS_Research #Digital_Divide #Organizational_Legitimacy References Bourdieu, P. (1986). The forms of capital. In J. G. Richardson (Ed.), Handbook of theory and research for the sociology of education (pp. 241-258). Greenwood Press. Chen, Y., Ma, H., and Zhou, T. (2024). Learn from whom? An empirical study of enterprise digital mimetic isomorphism under the institutional environment. Economies, 12(9), 243. https://doi.org/10.3390/economies12090243 Couldry, N., and Mejias, U. A. (2019). The costs of connection: How data is colonizing human life and appropriating it for capitalism. Stanford University Press. Davis, F. D. (1989). Perceived usefulness, perceived ease of use, and user acceptance of information technology. MIS Quarterly, 13(3), 319-340. https://doi.org/10.2307/249008 DeLone, W. H., and McLean, E. R. (2003). The DeLone and McLean model of information systems success: A ten-year update. Journal of Management Information Systems, 19(4), 9-30. https://doi.org/10.1080/07421222.2003.11045748 DiMaggio, P. J., and Powell, W. W. (1983). The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields. American Sociological Review, 48(2), 147-160. https://doi.org/10.2307/2095101 Goldfarb, A., and Tucker, C. (2019). Digital economics. Journal of Economic Literature, 57(1), 3-43. https://doi.org/10.1257/jel.20171452 Hinings, B., Gegenhuber, T., and Greenwood, R. (2018). Digital innovation and transformation: An institutional perspective. Information and Organization, 28(1), 52-61. https://doi.org/10.1016/j.infoandorg.2018.02.004 Schirone, M. (2023). Field, capital, and habitus: The impact of Pierre Bourdieu on bibliometrics. Quantitative Science Studies, 4(1), 186-208. https://doi.org/10.1162/qss_a_00232 Srnicek, N. (2017). Platform capitalism. Polity Press. Van Dijck, J., Poell, T., and de Waal, M. (2018). The platform society: Public values in a connective world. Oxford University Press. Venkatesh, V., Morris, M. G., Davis, G. B., and Davis, F. D. (2003). User acceptance of information technology: Toward a unified view. MIS Quarterly, 27(3), 425-478. https://doi.org/10.2307/30036540 Verwiebe, R., and Hagemann, S. (2025). Bourdieu revisited: New forms of digital capital - emergence, reproduction, inequality of distribution. Information, Communication and Society, 28(11), 1861-1883. https://doi.org/10.1080/1369118X.2024.2358170 Wallerstein, I. (1974). The modern world-system I: Capitalist agriculture and the origins of the European world-economy in the sixteenth century. Academic Press. Xue, L., Rashid, A. M., and Ouyang, S. (2024). The Unified Theory of Acceptance and Use of Technology (UTAUT) in higher education: A systematic review. SAGE Open, 14(1). https://doi.org/10.1177/21582440241229570

Enterprise information management is normally taught as a set of technical and managerial practices: storing data well, keeping it clean, protecting it, and turning it into useful knowledge. This article argues that such a narrow view misses most of what actually drives the way organizations handle information. Using an integrative review of literature published mostly between 2021 and 2026, the study reads #enterprise_information_management through three social theories that are rarely brought together in the information systems classroom. The first is #institutional_isomorphism, which explains why organizations in the same field end up looking alike. The second is Pierre Bourdieu's theory of fields, capital, and #habitus, which explains how information becomes a form of power and status inside and between organizations. The third is #world_systems_theory, updated through the idea of #data_colonialism, which explains how information value is unevenly distributed across the globe. The analysis shows that the spread of common data governance frameworks, enterprise software, and compliance regimes is better explained by social pressure than by pure efficiency. It shows that being seen as data-driven works as a kind of symbolic credit. And it shows that the global market for raw data and data labor follows older patterns of unequal exchange. The article offers a set of propositions for students and researchers and argues for a more critical, socially aware approach to information practice. The contribution is conceptual rather than empirical, and the framework is meant to be tested in future field studies. Keywords: enterprise information management; institutional theory; Bourdieu; world-systems; data governance; critical information systems 1. Introduction Most students meet #enterprise_information_management as a practical subject. The textbooks describe how an organization collects, stores, protects, shares, and eventually disposes of its information, and how it tries to squeeze value out of that information through analytics and reporting. The vocabulary is technical and reassuring. There are policies, standards, architectures, maturity models, and dashboards. The implied promise is that if a firm follows the right framework and buys the right tools, its information will become a well-managed asset that produces a competitive advantage. Recent reviews of the field confirm that the literature is dominated by this efficiency-and-capability framing, in which information is treated mainly as a resource to be optimized (Abraham, Schneider, and vom Brocke, 2019; Oliver, Cranefield, Lilley, and Lewellen, 2024). This framing is not wrong, but it is incomplete. It treats the organization as a closed machine making rational choices, and it treats #information_governance as a neutral, technical activity. What it leaves out is everything social. It does not explain why firms in the same industry adopt almost identical systems within a few years of each other, even when those systems do not obviously pay off. It does not explain why managers will spend heavily to be seen as modern and data-driven, regardless of whether the data changes any decision. And it does not explain why the global trade in data, data work, and data infrastructure looks so unequal, with a handful of firms and countries capturing most of the value while others supply the raw material. These are not technical puzzles. They are social, cultural, and political puzzles, and they need social theory to be understood. This article takes three well-established social theories and uses them as lenses on information practice. The choice is deliberate. Each theory was built to explain a different scale of social life, and together they cover the three scales where #enterprise_information_management actually operates. At the level of the organizational field, #institutional_isomorphism explains convergence and conformity. At the level of internal and inter-organizational competition, Bourdieu's concepts of #field, capital, and #habitus explain status, power, and reproduction. At the global scale, #world_systems_theory and its modern extension into #data_colonialism explain structural inequality in who extracts and who supplies information value. The point of bringing these together is not to dismiss the technical literature. Storing data well still matters. Rather, the point is to show that technical choices are embedded in social structures. A data governance committee does not write a policy in a vacuum. It writes a policy that looks like the policies of respected peers, that protects the professional standing of the people who wrote it, and that fits into a wider economy in which some actors set the rules and others follow them. When students see these layers, they read the field differently. They stop asking only what is the best practice and start asking who benefits from this practice, why does everyone copy it, and where does the value go. The article also has a practical motive. Information professionals increasingly face decisions that are ethical and political, not just technical. Questions about where data is stored, whose data is harvested, which vendors are trusted, and how surveillance is justified cannot be answered with a maturity model. The #digital_transformation agenda that dominates corporate strategy carries these questions inside it, often without naming them. A graduate who can only speak the language of efficiency will struggle. A graduate who can also see institutional pressure, symbolic power, and global inequality will be far better prepared. It is worth being clear about why these three theories were chosen rather than others. There is no shortage of frameworks in information systems research, and each has its strengths. The technology acceptance tradition and the unified theory of acceptance and use of technology explain individual willingness to use a system, and they have been applied very widely. The resource-based view explains how rare and hard-to-copy assets, including data, can produce advantage. The technology, organization, and environment framework organizes the factors that influence adoption. These are useful, but they share a tendency to keep the organization at the center of the analysis and to treat the wider social world as a set of external variables. The three theories used here do the opposite. They start from the social structures that surround and run through the organization, and they treat the firm's choices as expressions of those structures. That shift in starting point is exactly what is needed to see the patterns the efficiency literature cannot explain, and it is why these particular theories were selected as a complementary set rather than as competitors to the existing models. A second reason for the selection is coverage. A single theory tends to illuminate one scale and leave the others dark. Choose only institutional theory and you see conformity but not the global inequality behind the templates being copied. Choose only world-systems theory and you see the global structure but not the everyday professional habits that reproduce it. Choose only Bourdieu and you see status and struggle but risk losing sight of the formal rules and the world economy. The three together form a layered explanation, from the global to the field to the professional, and the seams between the layers turn out to be some of the most interesting parts of the analysis. The remainder of the article is organized in the standard way. The next section builds the theoretical framework, defining enterprise information management and then introducing each of the three theories and showing how they connect to information practice. The method section explains how the literature was selected and synthesized. The analysis section applies the combined framework to concrete features of information management, such as the spread of data governance, the rise of the data-driven identity, and the global division of data labor. The findings section draws out themes and offers propositions. The conclusion reflects on limitations and suggests where future research could go. 2. Background and Theoretical Framework 2.1 What enterprise information management actually covers It helps to be precise about the object of study. Enterprise information management is the organization-wide set of practices, roles, policies, and technologies through which an enterprise treats information as a managed resource across its whole life, from creation or capture, through storage, use, and sharing, to archiving and disposal. It overlaps with several neighboring fields. #data_governance is the part concerned with authority, accountability, and decision rights over data (Abraham, Schneider, and vom Brocke, 2019). #knowledge_management is the part concerned with capturing and reusing what people know. Records management, master data management, business intelligence, and information security all sit inside or beside it. Contemporary work increasingly folds in analytics, automation, and artificial intelligence, since these technologies depend completely on the quality and availability of managed information (Goel, Martin, and ter Hofstede, 2024). The scope is easier to grasp through the idea of an #information_lifecycle. Information is created or captured, then organized and stored, then used and shared, then retained or archived for as long as it has value or is legally required, and finally disposed of in a controlled way. Each stage has its own practices and its own risks, and enterprise information management is the attempt to govern the whole chain coherently rather than leaving each department to manage its own fragment. In practice few organizations achieve this coherence. Data sits in disconnected systems, the same customer appears under several identities, and ownership is unclear, which is why so much of the field's effort goes into integration, master data, and metadata, the descriptive information that tells you what a piece of data means and where it came from. Forward-looking accounts of enterprise information systems emphasize that the next phase of the field is precisely about coordination across these fragments, using shared meaning and semantic standards so that information from one system can be understood and trusted in another. Two features of this object matter for the theoretical argument. First, information management is deeply standardized. There are widely shared reference frameworks, professional bodies of knowledge, certifications, and vendor platforms, and organizations across very different sectors adopt strikingly similar versions of them. Recent systematic reviews of data governance note how a small number of frameworks and definitions circulate across the literature and across practice, producing a sense of shared best practice even where evidence of effectiveness is thin (Oliver, Cranefield, Lilley, and Lewellen, 2024). This standardization is exactly what institutional theory predicts and explains. Second, information has become a carrier of value and prestige. To call an organization data-driven is to praise it. To call a manager intuitive rather than analytical can now sound like criticism. Data culture, as the literature calls it, is not only about competence but about identity and belief (Oliver, Cranefield, Lilley, and Lewellen, 2024). That makes information a candidate for analysis as a form of capital in Bourdieu's sense, and it makes the symbolic side of information management visible. 2.2 Institutional isomorphism: why organizations come to look alike The first lens comes from organizational sociology. DiMaggio and Powell (1983) asked a simple but powerful question. Why, when you look at organizations operating in the same area, do they become so similar over time, even when there is no obvious efficiency reason for them to converge? Their answer was that organizations are pushed toward sameness, a process they called #institutional_isomorphism, by three distinct pressures inside what they called the #organizational_field, meaning the set of organizations that recognize one another as relevant, including competitors, regulators, suppliers, and professional groups. The first pressure is coercive. #coercive_pressure comes from rules, laws, and dependencies. When a government passes a data protection law, every organization that handles personal data must build similar consent mechanisms, similar breach procedures, and similar record-keeping. When a large customer demands a particular security certification, its suppliers all acquire it. The result is convergence driven by force or dependence rather than by free choice. The second pressure is mimetic. #mimetic_pressure comes from uncertainty. When managers do not know what will work, they copy organizations they regard as successful or legitimate. This is rational in a sense, because imitation reduces the risk of looking foolish, but it spreads practices regardless of whether those practices actually help the imitator. A great deal of technology adoption follows this logic. A study of social media adoption among very small firms found that mimetic and normative pressures shaped adoption even more than calculations of usefulness, and in some cases the complexity of imitating others actually discouraged adoption (Osakwe and Ikhide, 2022). The third pressure is normative. #normative_pressure comes from professionalization. As a field develops professional associations, university courses, shared qualifications, and conferences, the people inside it come to share ideas about the proper way to do things. They carry these ideas between employers. A certified data manager trained on a standard body of knowledge will recommend the same controls wherever they work. Recent work extending institutional theory to the adoption of artificial intelligence has emphasized exactly this point, showing how certification bodies and professional standards shape what counts as responsible practice and push organizations toward the same templates (Reis and Pinheiro Junior, 2025). A further idea from this tradition deserves attention because it appears so often in information practice. Meyer and Rowan (1977) observed that organizations frequently engage in what they called #decoupling, meaning a gap between the formal structures an organization displays and the actual work it does day to day. The organization adopts the expected policy, publishes it, and points to it when challenged, while the real activity proceeds more or less as before. Anyone who has seen a data governance policy that exists as a document but changes nothing on the ground has seen decoupling. The policy is not a lie exactly. It is a ceremony that secures legitimacy, and the looseness between the ceremony and the work is what allows the organization to satisfy outside expectations without disrupting its operations. This concept is valuable for students because it warns against reading the presence of a framework as evidence that the framework is doing anything. The map is not the territory, and in institutional life the two are often deliberately kept apart. The classic insight, which goes back further to Meyer and Rowan (1977), is that organizations adopt formal structures partly as ceremony. They build the visible apparatus of good management because it earns #legitimacy, the social license to be regarded as a proper, trustworthy organization, and legitimacy can matter more for survival than technical results. Applied to information practice, this is a striking claim. It suggests that a firm may build an elaborate governance program not because it has calculated the return, but because peers, regulators, and professionals expect it, and because being seen to comply protects the organization and the careers of its managers. The convergence of data governance frameworks across industries, documented repeatedly in recent reviews, fits this prediction closely (Oliver, Cranefield, Lilley, and Lewellen, 2024). 2.3 Bourdieu: information as capital, the field as a struggle, and the habitus of the professional The second lens comes from Pierre Bourdieu, whose work is usually summarized through three linked concepts. A #field is a structured social space in which actors compete for valued resources and for the right to define what counts as valuable. Capital is whatever is scarce and valued in a given field, and Bourdieu insisted that capital comes in several forms, not only #economic_capital but also #cultural_capital, meaning knowledge, skills, credentials, and taste, #social_capital, meaning useful relationships and networks, and #symbolic_capital, meaning prestige, honor, and recognition (Bourdieu, 1986). The #habitus is the set of durable dispositions, the deeply learned ways of perceiving, judging, and acting, that people acquire from their position and that lead them to reproduce that position almost without thinking (Bourdieu and Wacquant, 1992). Bourdieu's framework has been applied widely in information science, where researchers have used field, capital, and habitus to study scholarly communication, citation, and the unequal standing of researchers and institutions (Schirone, 2023). More recently, scholars have proposed that the data we generate has become a new form of capital. Individual-level data, they argue, can be treated as #digital_capital, a resource that is unevenly distributed, that can be converted into economic value, and that shapes the reproduction strategies of actors across social classes and across the firms that hold it (Verwiebe and colleagues, 2024). Work on the professional identity of technology workers has similarly shown that a distinct habitus has formed among them, marked by practices of self-measurement and the production of data products, which sets them apart as a recognizable group with its own dispositions and claims to status (Dorschel, 2022). Reading enterprise information management through Bourdieu changes what we see. Information stops being a neutral asset and becomes a stake in a competitive game. Inside an organization, control over data confers power. The department that owns the definitive customer record, or the analytics team whose numbers the board trusts, holds a position of strength that is not reducible to budget. Across organizations, the reputation of being data-mature is #symbolic_capital that can be converted into investment, talent, and trust. The data professional's #habitus, formed through training and shared practice, leads to the reproduction of standard approaches not by external force but by internalized conviction about the right way to work. This connects directly to the normative pressure described by institutional theory, but Bourdieu adds the dimensions of struggle, conversion between forms of capital, and the quiet reproduction of #power_relations. 2.4 World-systems theory and data colonialism: the global division of information value The third lens raises the scale to the whole world. Immanuel Wallerstein argued that since roughly the sixteenth century there has been a single capitalist world-economy organized into zones (Wallerstein, 1974). The #core consists of wealthy regions with advanced production, strong institutions, and the power to set the terms of exchange. The #periphery supplies raw materials and cheap labor and receives finished goods on unfavorable terms. The #semi_periphery sits in between, exploited by the core but itself exploiting the periphery. The engine of the system is #unequal_exchange, a structural arrangement in which value flows steadily from periphery to core through the ordinary workings of trade rather than through open coercion (Wallerstein, 2004). For a long time this seemed distant from information systems. That has changed. A growing body of work argues that the global data economy reproduces the old pattern in a new medium. Couldry and Mejias (2019) named this #data_colonialism, drawing a deliberate parallel between historical colonial appropriation of land and labor and the contemporary appropriation of human life as data. In their later work they describe a wide social quantification sector, dominated by a small number of mostly United States based firms, that extracts data from populations everywhere and converts it into value concentrated at the core, while wrapping the process in reassuring stories about convenience, connection, and progress (Mejias and Couldry, 2024). The intellectual history of this critique now spans several related terms, including techno-colonialism and platform coloniality, but the shared claim is that #datafication follows the geography of empire (Couldry and Mejias, 2019). The parallel is concrete, not merely rhetorical. The work of cleaning, labeling, and moderating data, the unglamorous #data_labor on which analytics and artificial intelligence depend, is frequently offshored to lower-income regions, echoing earlier patterns of resource extraction and cheap labor. The platforms, cloud infrastructure, and intellectual property that capture most of the value remain concentrated in core firms. The raw material, namely the behavior and attention of users, is gathered globally, while the finished products and the profits return to the center. This is the same structural shape that world-systems theory described for cotton and minerals, now applied to behavioral data. The semi-periphery deserves particular attention because it complicates any simple story of victims and villains. Wallerstein insisted that the middle zone is both exploited and exploiting, and the data economy shows the same pattern. Large firms and states in rapidly industrializing economies build their own platforms, host regional data centers, and in turn draw value and labor from poorer neighbors, even as they remain dependent on core infrastructure, chips, and standards. A semi-peripheral technology firm can be simultaneously a subordinate customer of a core cloud provider and a dominant data extractor in its own regional market. This middle position matters for students because it shows that the global structure is not a flat division between a virtuous periphery and a predatory core, but a layered hierarchy in which most actors occupy an in-between place and reproduce the system from there. It is also worth connecting this lens to the closely related diagnosis of #surveillance_capitalism, the argument that the dominant business model of the leading platforms is the conversion of human experience into behavioral data that is then used to predict and influence action for profit (Zuboff, 2019). World-systems theory and surveillance capitalism are not the same theory, but they fit together. Surveillance capitalism describes the mechanism by which value is extracted from human life, and world-systems theory describes the geography along which that extracted value travels. Read together they explain both how the data is taken and where it ends up, which is exactly the combination an information manager needs in order to understand the global context of a procurement decision. For enterprise information management this lens is uncomfortable but necessary. When a firm in a peripheral or semi-peripheral economy adopts a core vendor's platform, stores its data in a core jurisdiction, and accepts the terms set by that vendor, it is not only making a procurement decision. It is taking a position within a stratified global system. Its information dependence may deepen even as its dashboards improve. Concepts such as data sovereignty, which appear increasingly in policy debate, are attempts by states and organizations to resist this dependence, and they make little sense unless one sees the underlying #global_division_of_labor in information. 2.5 Bringing the three lenses together The three theories are not rivals here. They are complementary because they work at different scales and explain different mechanisms. Institutional isomorphism explains horizontal convergence: why organizations in a field adopt similar information practices, through coercive, mimetic, and normative pressure. Bourdieu explains vertical struggle and reproduction: how information functions as capital, how positions in a field are defended, and how a professional habitus quietly reproduces standard practice. World-systems theory and data colonialism explain global structure: how the value produced by information is distributed unequally across core and periphery through unequal exchange. There are natural bridges between them. The normative pressure of institutional theory and the habitus of Bourdieu describe overlapping realities from different angles, one stressing external professional expectation and the other stressing internalized disposition. The legitimacy that institutions seek and the symbolic capital that Bourdieu describes are close cousins, both naming the value of being recognized as proper and prestigious. And the convergence that isomorphism describes within a field looks different, and more troubling, once world-systems theory points out that the templates being copied usually originate at the core and carry core interests inside them. A firm that copies the leader is, in the global frame, often importing dependence. The combined framework therefore reads information practice as socially pressured, internally contested, and globally stratified all at once. The analysis section puts this combined reading to work. 3. Method This study is a conceptual contribution built on an integrative review of the literature rather than on new empirical data. An #integrative_review is appropriate when the goal is to synthesize ideas from different traditions, to build or extend a framework, and to generate propositions for later testing, rather than to measure a relationship. Because the article deliberately crosses fields, joining information systems with organizational sociology, social theory, and political economy, a strict systematic review protocol focused on a single question would have excluded most of the relevant material. The integrative approach allows theoretical and empirical sources to be read together. The search strategy combined database searching with targeted citation tracing. Searches were run across general academic search engines and publisher databases using combinations of terms drawn from the three theoretical areas and the substantive area, for example enterprise information management with institutional isomorphism, data governance with Bourdieu and capital, and datafication with world-systems or data colonialism. The reference lists of the most relevant articles were then traced backward to locate foundational works and forward to locate recent applications. This mixed approach is well suited to a cross-disciplinary synthesis where the relevant literatures do not share a common keyword vocabulary. The selection followed clear #inclusion_criteria. Priority was given to #peer_reviewed journal articles and scholarly books. Recency was a strong preference: the review prioritized work published between 2021 and 2026 so that the picture of practice would be current, and the great majority of the substantive sources fall in that window. A small number of older works were retained when they are the original and unavoidable statement of a theory, for example the founding papers on institutional isomorphism and the originating statements of world-systems analysis and of Bourdieu's theory of capital. Excluding these would have misrepresented the ideas and broken the chain of citation that any reader could follow. Sources were excluded if they were not retrievable in full, if they could not be verified as genuine, or if they were promotional vendor material rather than scholarship. Analysis proceeded by #thematic_synthesis. Each selected source was read and coded against the three theoretical lenses and against the features of information management it spoke to, such as governance, professional identity, technology adoption, or global data flows. Codes were then grouped into the cross-cutting themes presented in the findings. Because the work is interpretive, the synthesis reflects a reasoned reading of the literature rather than a statistical aggregation, and the propositions offered later are framed as testable claims, not as established results. A word is needed on how the three literatures were held together during the synthesis, because joining traditions that rarely cite one another carries a real risk of forcing connections that are not there. To guard against this, each proposed link between theories was checked against the source material in both directions. A claim that normative institutional pressure resembles Bourdieu's habitus, for example, was only retained because both literatures independently describe the same underlying reality, the internalized professional expectation that makes a practice feel obviously correct, even though they name it differently and emphasize different aspects. Where the literatures genuinely disagreed, the disagreement was kept rather than smoothed over, since an honest synthesis preserves tension as well as agreement. The aim throughout was a framework that a reader could trace back to the sources, not a tidy story imposed on top of them. The article also positions itself deliberately within the wider field. It does not claim that the efficiency and capability literature is mistaken, and it draws on that literature for its account of what information management involves. What it claims is that the social theories add an explanatory layer that the technical literature does not contain, and the two are meant to sit together. This is the standard contribution of a conceptual integrative review: not to overturn existing knowledge but to reframe it and to connect it to bodies of theory that have been kept at a distance. Two limitations of the method should be stated plainly. First, an integrative review depends on the judgment of the reviewer in selecting and interpreting sources, so a different reviewer might weight the literatures differently. Second, the framework is built and illustrated rather than empirically tested, so its value lies in the questions and propositions it generates, which the conclusion identifies as an agenda for future fieldwork. These limitations are typical of conceptual work and do not undermine the contribution, but they do bound the claims that can be made. 4. Analysis 4.1 The spread of data governance read as isomorphism Consider one of the central activities of the field, the establishment of a data governance program, complete with a governance council, data owners, #data_stewardship roles, policies, a data catalog, and quality metrics. The standard story is that organizations build these because they improve data quality and therefore decisions. Yet the empirical literature on the effectiveness of such programs is surprisingly mixed, and reviews repeatedly note that organizations adopt very similar structures regardless of context (Oliver, Cranefield, Lilley, and Lewellen, 2024; Goel, Martin, and ter Hofstede, 2024). Institutional theory offers a sharper explanation. The structures spread because they are expected. Coercive pressure is the most visible driver. Data protection regulation across many jurisdictions effectively mandates much of the apparatus, so firms that handle personal data converge on similar consent, retention, and breach procedures because the law requires it. #regulatory_pressure of this kind produces near-identical compliance machinery across otherwise dissimilar firms. Mimetic pressure follows close behind. Faced with uncertainty about what good governance means, managers copy the frameworks used by admired firms and by the consultancies that advise them, which is why a small set of reference frameworks dominates the literature and practice. Normative pressure completes the picture, as certified professionals carry a shared body of knowledge between employers and recommend the same controls everywhere. The study of adoption in small firms is instructive here, because it found that imitation and professional expectation drove adoption strongly, and that the value calculation that the rational model assumes was often secondary (Osakwe and Ikhide, 2022). The consequence is #standardization that looks like consensus on best practice but is partly ceremony. Following Meyer and Rowan (1977), the program signals that the organization is a proper, trustworthy member of its field, and this signal can matter for survival regardless of measured results. This does not mean governance is worthless. It means that its spread cannot be explained by efficiency alone, and that students should be skeptical of the claim that everyone does it because it works. Sometimes everyone does it because everyone does it, and because not doing it would look reckless. 4.2 The data-driven organization read through Bourdieu Now read the same field through Bourdieu. Within any organization there is a contest over whose knowledge counts, and information is a central stake. The team that controls the trusted numbers holds a strong position, and this position is a form of capital that can be defended and converted. Being recognized as data-driven is #symbolic_power, a prestige that the organization and its leaders accumulate and that converts into investment, partnerships, and the ability to recruit. The recent argument that individual-level data has become a new #digital_capital extends this logic outward, treating data holdings as a resource that shapes the competitive strategies of firms and the life chances of individuals (Verwiebe and colleagues, 2024). The concept of habitus explains why this reproduces so smoothly. Data professionals are trained into a shared set of dispositions, a way of seeing problems as quantifiable and of valuing measurement, documented in studies of technology workers as a distinctive professional identity built around self-measurement and the production of data products (Dorschel, 2022). This habitus leads them to recommend and build standard approaches not because a regulator forces them and not only because they calculate a payoff, but because it is simply how proper work is done in their eyes. #data_literacy itself becomes cultural capital, a credential that marks insiders and excludes outsiders, and that maps onto seniority and reward. Two further Bourdieusian ideas sharpen this picture. The first is #doxa, the set of assumptions in a field that are so taken for granted that they are never argued about, the things that simply go without saying. In a mature data culture the doxa might include the belief that more measurement is always better, that what cannot be measured cannot be managed, or that a decision backed by data is automatically more legitimate than one backed by experience. These beliefs are rarely defended because they rarely need to be. They form the unquestioned background against which arguments take place, and they quietly advantage those whose work fits the measurable model. The second idea is #symbolic_violence, Bourdieu's term for the way domination is accepted by the dominated as natural and even right. When professionals whose tacit expertise has been devalued come to accept that their judgment is simply less rigorous, less serious, than a dashboard, they are experiencing symbolic violence. They are not being coerced. They have internalized the field's hierarchy of value and apply it against themselves. Reading information practice this way reveals a layer of power that is invisible in the efficiency account precisely because it works through belief rather than through force. The Bourdieusian reading also exposes losers. When information practice is reorganized around data, those whose expertise is tacit, relational, or experiential can find their #cultural_capital devalued. A veteran whose judgment is not expressible as a metric may lose standing to a junior analyst with a dashboard. This is a struggle over the very definition of valuable knowledge, and it produces winners and losers in a way the efficiency story never mentions. Recognizing the symbolic and political dimension of being data-driven helps students see that information strategy is also identity strategy and power strategy. It also explains a behavior that puzzles the efficiency model, namely the willingness of organizations to spend on capabilities whose decision impact is unclear. In Bourdieu's terms they are converting economic capital into symbolic capital, buying the recognition of being advanced, and that recognition can later convert back into economic terms through investor confidence, partnership, and the ability to attract scarce talent. The forms of capital are not separate currencies but a single system of exchange, and information management is now one of the markets in which the exchange happens. 4.3 The global data economy read through world-systems theory Lift the scale to the world and the picture changes again. An enterprise rarely manages information in isolation. It runs on cloud infrastructure owned by a few core firms, uses platforms whose terms it cannot negotiate, and increasingly depends on artificial intelligence models trained on globally extracted data. World-systems theory and the data colonialism literature read this arrangement as a contemporary form of #unequal_exchange. The raw material, behavioral and personal data, is gathered from populations across core, semi-periphery, and periphery alike, while the infrastructure and intellectual property that capture the value are concentrated at the core (Couldry and Mejias, 2019; Mejias and Couldry, 2024). The clearest illustration is the #global_division_of_labor in data work. The labeling, cleaning, and moderation that make data usable, the tasks on which modern analytics depend, are frequently routed to lower-income regions where labor is cheap, reproducing the old colonial pattern in which the periphery supplied raw inputs and cheap effort while the finished goods and profits flowed to the center. The #data_extraction that powers core platforms thus rests on a hidden geography of low-paid work, even as the public story emphasizes innovation and convenience. This is precisely the structural shape, and the legitimating narrative, that the data colonialism critique identifies (Mejias and Couldry, 2024). For an enterprise outside the core, adopting the dominant platforms creates a particular bind. The tools genuinely improve local capability, yet they also deepen dependence, since data, skills, and value gravitate toward the vendor and its home jurisdiction. This is the information version of the development trap that world-systems theory described, in which integration into the system on the system's terms can entrench a subordinate position. It also reframes some familiar debates. Concerns about #information_asymmetry between platforms and their users, and policy moves toward data localization and data sovereignty, become legible as attempts to alter an unequal global structure rather than as mere technical or legal preferences. The related literature on #platform_capitalism reinforces the point, describing how value concentrates in the firms that own the infrastructure and the data (Srnicek, 2017; Zuboff, 2019). 4.4 Artificial intelligence and automation read across the three lenses The rapid spread of #artificial_intelligence into information management is a useful test of the framework, because it is the phenomenon most often presented as pure technical progress and most in need of social reading. All three lenses apply at once. Through the institutional lens, the wave of adoption shows every sign of mimetic and normative pressure. Faced with deep uncertainty about what these tools can really do, organizations copy admired early adopters and respond to a chorus of professional and consultant opinion that declares adoption essential. Recent work extending institutional theory to artificial intelligence argues precisely that certification bodies, professional standards, and the imitation of visible leaders, rather than careful evaluation, are driving much of the uptake, so that organizations converge on similar tools and similar governance language before the evidence on value is settled (Reis and Pinheiro Junior, 2025). Through the Bourdieusian lens, artificial intelligence is a new front in the struggle over capital. To be seen as an organization that uses it is symbolic capital, and the ability to build or direct it is a scarce form of cultural capital that raises the standing of those who hold it. The doxa of the data culture, the belief that more automation and more prediction are inherently progress, makes the adoption feel natural and beyond debate, which is exactly how doxa works. Through the world-systems lens, the dependence is at its sharpest. The most capable models, the computing infrastructure to run them, and the intellectual property that protects them are concentrated in a very small number of core firms, while the labeling and moderation work that trains and maintains them is dispersed to lower-cost regions. An organization that builds its operations on these models gains real capability and simultaneously deepens a dependence whose value flows upward and outward, the familiar shape of unequal exchange in a new and fast-moving form (Mejias and Couldry, 2024). Artificial intelligence, then, is not an exception to the argument of this article. It is its clearest illustration. 4.5 Reading the three lenses together on one phenomenon The real power of the framework appears when all three lenses are turned on a single decision. Take a mid-sized firm in a semi-peripheral economy choosing to adopt a leading cloud analytics platform and to build a governance program around it. The efficiency story says the firm weighed costs and benefits and chose the best tool. The combined social reading is richer and more honest. Institutional theory shows that the choice is shaped by pressure. Regulators require controls, admired competitors have already adopted the platform, and the firm's own certified professionals expect it, so the decision is partly conformity in pursuit of #legitimacy rather than a clean calculation. Bourdieu shows that the choice is also about position. Adopting the platform earns the firm and its managers symbolic capital as a modern, data-driven organization, strengthens the internal standing of the analytics function, and reproduces the professional habitus that treats this path as obviously correct. World-systems theory shows that the choice has a global meaning the firm may not intend. By building on a core vendor's infrastructure and accepting its terms, the firm takes a subordinate position in a stratified system and may deepen its dependence even as its capabilities grow. None of these readings cancels the others. The decision is simultaneously pressured, positional, and global, and only by holding all three in view can a student or manager understand what is really happening. 5. Findings The synthesis produced several cross-cutting themes, which can be stated as findings about how enterprise information management actually works once social theory is taken seriously. Each is paired with a proposition that future empirical work could test. The first finding is that information practice is socially embedded rather than purely technical. Across the literature, the spread of governance frameworks, enterprise systems, and compliance regimes tracks social pressure at least as closely as it tracks measured performance (Osakwe and Ikhide, 2022; Oliver, Cranefield, Lilley, and Lewellen, 2024). The #social_embeddedness of the field means that the efficiency model, taken alone, systematically misexplains why organizations do what they do. Proposition one: the degree of similarity in information practices across organizations in a field will correlate more strongly with measures of institutional pressure than with measures of realized performance. The second finding is that convergence in the field is driven by isomorphism in all three of its forms. Coercive, mimetic, and normative pressures each leave a visible mark on information practice, and the relative weight of each shifts with context, with regulation dominating in heavily governed sectors and imitation dominating under uncertainty (DiMaggio and Powell, 1983; Reis and Pinheiro Junior, 2025). The result is an #isomorphic_convergence that produces the appearance of universal best practice. Proposition two: in fields with strong professional certification, normative pressure will predict the adoption of specific governance structures even after controlling for regulation and competitor behavior. The third finding is that information now functions as capital, and that managing it is therefore a struggle over power and status. Data holdings, data literacy, and the reputation of being data-driven all behave like the forms of capital Bourdieu described, can be converted into one another, and reproduce #power_relations inside and between organizations (Bourdieu, 1986; Verwiebe and colleagues, 2024; Dorschel, 2022). The #information_value that organizations chase is partly symbolic, not only economic. Proposition three: organizational investment in visible analytics capability will be predicted by the symbolic returns of appearing data-driven to external audiences, independent of the internal decision impact of that capability. The fourth finding is that the global structure of the data economy reproduces patterns of unequal exchange. Value flows from the populations that supply data and the workers who process it toward the core firms that own the infrastructure, in a geography that echoes earlier colonial divisions (Couldry and Mejias, 2019; Mejias and Couldry, 2024; Srnicek, 2017). This produces persistent #global_inequality in information, visible in the #digital_divide between those who set the terms of datafication and those who live under them, and it makes movements for #data_sovereignty intelligible as structural responses. Proposition four: the proportion of an enterprise's information value captured by external core vendors will be higher for organizations located in peripheral and semi-peripheral economies than for comparable organizations in the core. The fifth finding ties the others together. Because the templates that converge across a field usually originate at the core and carry core interests, the local pressure to conform and the global structure of inequality reinforce each other. #professionalization spreads core-designed practice as neutral best practice, the habitus of the profession makes it feel natural, and the global system quietly benefits from the spread. The three theories, in other words, describe one connected process seen from three positions. Proposition five: the diffusion of a given information practice across a field will be faster, and its core origin less questioned, where professional and institutional pressure is high, regardless of the practice's fit to local conditions. It is worth pausing on what links these five findings into one account rather than five separate observations. The thread running through all of them is that information practice is governed by social value as much as by technical merit, and that social value operates differently at each scale. Within the field, value takes the form of legitimacy, the recognition that an organization is proper and trustworthy. Within and between organizations, it takes the form of capital, the prestige and power that flow to those who command information. Across the world, it takes the form of captured surplus, the economic value that concentrates at the core. Legitimacy, capital, and surplus are three faces of the same basic fact, that information is socially valuable and that its management is therefore a social process. Once this is seen, the findings stop looking like a list and start looking like a single explanation viewed from three distances, which is the contribution the combined framework was built to make. Taken together, these findings support a single overarching claim. Enterprise information management is not a neutral technical discipline that organizations adopt because it works. It is a social field shaped by institutional pressure, contested as a site of capital and power, and embedded in a stratified global economy. The technical content is real, but it sits inside these social structures, and it cannot be understood without them. 6. Conclusion This article set out to show that the standard, efficiency-centered account of enterprise information management is incomplete, and that three established social theories can fill the gap. Institutional isomorphism explains why organizations in a field adopt such similar information practices, through coercive, mimetic, and normative pressure, and why much of what looks like best practice is also ceremony performed to win legitimacy. Bourdieu's theory of fields, capital, and habitus explains how information becomes a stake in a struggle for power and status, how being data-driven works as symbolic credit, and how a professional habitus reproduces standard practice from the inside. World-systems theory, extended through the idea of data colonialism, explains how the value produced by information is distributed unequally across the globe, with core firms capturing what peripheries supply. Read together, these lenses present information management as socially pressured, internally contested, and globally stratified, and they do so without denying that the technical work matters. For students, the practical lesson is a habit of mind. When you meet a framework, a tool, or a best practice, ask three further questions. Who is pressuring whom to adopt this, and is it law, imitation, or professional expectation. Whose power and status does it raise or lower inside and between organizations. And where, in the global system, does the value end up. These questions do not replace technical skill. They surround it with judgment, and that judgment is exactly what information work increasingly demands as it becomes entangled with ethics, regulation, and politics. A #critical_information_management that keeps both the technical and the social in view is better preparation for that reality than either alone, and it connects naturally to the growing concern with #information_ethics in the field. The article has clear limitations. It is conceptual, so its framework is built and illustrated rather than tested, and the five propositions are offered as claims for future work, not as proven results. The integrative method depends on interpretive judgment, and a different reviewer might balance the three theories differently or add others, since approaches such as structuration theory, the resource-based view, and critical data studies could each contribute. The framework is also pitched at a general level and would need adaptation to specific sectors, since the mix of coercive, mimetic, and normative pressure, and the position in the world-system, vary a great deal between, for example, a global bank and a rural health service. There are concrete implications for practice and for teaching that follow from the argument and deserve to be stated before the research agenda. For practitioners, the framework suggests a discipline of asking, before each major information decision, whether the organization is adopting a practice because it has been shown to work in the local setting or because the field expects it, and whether the chosen vendor and architecture deepen or reduce long-term dependence. Neither question appears on a standard maturity assessment, yet both bear directly on whether a program will create value or merely create the appearance of it. The decoupling insight, in particular, gives managers a reason to look past the existence of policies and to ask what the policies actually change. For leaders in semi-peripheral and peripheral economies the world-systems lens carries a strategic message, namely that capability and dependence can grow together, and that building local skills, retaining data where possible, and negotiating terms are not merely defensive gestures but ways of improving the organization's structural position over time. For teaching, the implication is that the social theories belong in the information management curriculum alongside the technical content, not as an optional ethics module bolted on at the end but as a way of seeing the core material. A student who learns data governance as a checklist will apply the checklist. A student who learns it as a field shaped by isomorphic pressure, contested as capital, and embedded in a global structure will be able to advise an organization on whether the checklist is worth following and at what cost. Given how quickly information work is being entangled with regulation, automation, and global politics, that broader literacy is no longer a luxury. It is part of basic competence in the field. These limitations point straight to an agenda for #future_research. The propositions invite empirical study, for instance survey or case work that measures institutional pressure and tests whether it predicts convergence better than performance does, or comparative studies that trace where information value actually flows for organizations in different zones of the world-system. Qualitative work could examine how the professional habitus forms and how it shapes governance choices in practice. Policy-oriented work could evaluate whether data sovereignty measures actually shift the structural inequality that world-systems theory describes. In all of these, the contribution of the present article is to supply a connected vocabulary, drawn from three serious social theories, with which the next generation of information professionals can see their field whole, and not only as a machine to be optimized. Hashtags Topic tags: #Enterprise_Information_Management #Information_Governance #Data_Governance #Institutional_Isomorphism #Bourdieu #World_Systems_Theory #Data_Colonialism #Knowledge_Management #Digital_Transformation #Cultural_Capital #Symbolic_Power #Organizational_Field #Critical_Data_Studies #Information_Systems_Research #Datafication Related framings: #EIM_Theory #InformationAsCapital #CorePeripheryData #IsomorphicConvergence #SocialEmbeddednessOfData #PowerAndInformation References Abraham, R., Schneider, J., and vom Brocke, J. (2019). Data governance: A conceptual framework, structured review, and research agenda. International Journal of Information Management, 49, 424-438. https://doi.org/10.1016/j.ijinfomgt.2019.07.008 Bourdieu, P. (1986). The forms of capital. In J. G. Richardson (Ed.), Handbook of Theory and Research for the Sociology of Education (pp. 241-258). Greenwood Press. Bourdieu, P., and Wacquant, L. J. D. (1992). An Invitation to Reflexive Sociology. University of Chicago Press. Couldry, N., and Mejias, U. A. (2019). Data colonialism: Rethinking big data's relation to the contemporary subject. Television and New Media, 20(4), 336-349. https://doi.org/10.1177/1527476418796632 DiMaggio, P. J., and Powell, W. W. (1983). The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields. American Sociological Review, 48(2), 147-160. https://doi.org/10.2307/2095101 Dorschel, R. (2022). A new middle-class fraction: Tech workers and the transformation of the entrepreneurial self. The Sociological Review, 70(6), 1302-1320. https://doi.org/10.1177/00258172221103015 Goel, K., Martin, N., and ter Hofstede, A. (2024). Demystifying data governance for process mining: Insights from a Delphi study. Information and Management, 61(5). Mejias, U. A., and Couldry, N. (2024). Data Grab: The New Colonialism of Big Tech and How to Fight Back. University of Chicago Press. Meyer, J. W., and Rowan, B. (1977). Institutionalized organizations: Formal structure as myth and ceremony. American Journal of Sociology, 83(2), 340-363. https://doi.org/10.1086/226550 Oliver, G., Cranefield, J., Lilley, S., and Lewellen, M. J. (2024). Understanding data culture/s: Influences, activities, and initiatives. Journal of the Association for Information Science and Technology, 75(3), 201-214. Osakwe, C. N., and Ikhide, J. E. (2022). Institutional isomorphism and social media adoption: A study within the microenterprise context. Aslib Journal of Information Management, 74(6), 989-1006. https://doi.org/10.1108/AJIM-06-2021-0178 Reis, J. F., and Pinheiro Junior, L. P. (2025). Institutional theory and the diffusion of innovation in the institutionalization of artificial intelligence. BAR - Brazilian Administration Review, 22(4), e250060. Schirone, M. (2023). Field, capital, and habitus: The impact of Pierre Bourdieu on bibliometrics. Quantitative Science Studies, 4(1), 186-208. https://doi.org/10.1162/qss_a_00232 Srnicek, N. (2017). Platform Capitalism. Polity Press. Verwiebe, R., and colleagues (2024). Bourdieu revisited: New forms of digital capital, emergence, reproduction, inequality of distribution. Information, Communication and Society, 28(11), 1861-1883. https://doi.org/10.1080/1369118X.2024.2358170 Wallerstein, I. (1974). The Modern World-System I: Capitalist Agriculture and the Origins of the European World-Economy in the Sixteenth Century. Academic Press. Wallerstein, I. (2004). World-Systems Analysis: An Introduction. Duke University Press. Zuboff, S. (2019). The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power. PublicAffairs.

The #shift_left_service_theory represents one of the most important strategic shifts in modern #IT_service_management (#ITSM). At its core, the theory proposes that #IT_issue_resolution should be moved as close to the front line and the #end_user as possible, ideally through #automation, #self_service_portals, and intelligent tools rather than through the traditional escalation chain that routes every problem through multiple support tiers. This article examines the conceptual foundations, organizational logic, and practical applications of the shift-left philosophy. Drawing on Pierre Bourdieu's concepts of field and capital, Immanuel Wallerstein's world-systems theory, and DiMaggio and Powell's framework of #institutional_isomorphism, this paper situates shift-left service design within broader structural and sociological contexts. The article employs a qualitative literature synthesis methodology, drawing on peer-reviewed sources published between 2020 and 2026. Findings confirm that organizations successfully implementing shift-left strategies reduce #mean_time_to_resolution by between 42 and 90 percent, cut #first_contact_resolution costs significantly, and achieve measurable gains in user satisfaction. The article also identifies persistent barriers including cultural resistance, poor knowledge management, and algorithmic bias in AI-driven triage. Theoretical contributions include a novel mapping of Bourdieu's capital theory to the redistribution of service knowledge and the application of isomorphic pressures to explain why the shift-left model has spread so uniformly across industries. The article concludes with recommendations for students, practitioners, and policymakers engaged in digital service transformation. Keywords: shift-left service, IT service management, automation, self-service, ITIL 4, knowledge management, institutional isomorphism, Bourdieu, digital transformation, first contact resolution 1. Introduction Imagine a world where every time your laptop loses its internet connection at work, you have to log a ticket, wait for a support agent to call back, answer a series of questions, and then wait again while the agent escalates your issue to a second tier of specialists. This scenario was the everyday reality for millions of workers before the widespread adoption of #shift_left_service design. It was expensive, slow, and deeply frustrating for everyone involved, particularly the #end_user, who just wanted to get back to work. The shift-left philosophy offers a fundamentally different answer: push the solution as close to the person who has the problem as possible. The term #shift_left originally emerged from software testing, where it described the practice of identifying defects earlier in the development lifecycle rather than catching them only at the end during final quality assurance. In the context of #IT_service_management, the phrase has been adapted to mean something analogous: resolving IT issues at the earliest, cheapest, and most accessible point in the service chain, ideally through #self_service or automated resolution before a human agent ever becomes involved (Shastri and Thampi, 2021). The underlying logic is straightforward: every issue that is resolved at a lower tier costs less, takes less time, and frees higher-tier specialists for genuinely complex problems. The global expansion of #digital_transformation initiatives, accelerated sharply by the disruptions of the COVID-19 pandemic, gave this philosophy new urgency (Al-Ashmoery et al., 2024). As organizations shifted operations online almost overnight, service desks were flooded with requests. #ITSM platforms like ServiceNow became critical infrastructure almost overnight. The pressure to deflect, automate, and self-resolve was no longer aspirational; it was a survival strategy. This article provides a structured academic examination of shift-left service theory for students and practitioners who want to understand not just what it is but why it works, where it comes from, and what its limits are. Section 2 builds the theoretical framework using Bourdieu, world-systems theory, and institutional isomorphism. Section 3 describes the methodological approach. Section 4 analyzes key empirical findings from the literature. Section 5 synthesizes major findings. Section 6 concludes with implications and recommendations. The article is important for students of information systems, organizational theory, and public administration because it bridges a gap between technical ITSM literature, which tends to be highly applied and tool-focused, and broader sociological theories of institutional change and organizational field dynamics. 2. Background and Theoretical Framework 2.1 The Architecture of Traditional IT Service Tiers To understand what #shift_left_theory changes, one first needs to understand the traditional architecture of IT service support. Most large organizations structured their IT support using a tiered model loosely aligned with the Information Technology Infrastructure Library (#ITIL), a globally recognized best-practice framework for ITSM (Akbar et al., 2026; John et al., 2022). In this model, Tier 0 represents #self_service resources such as knowledge base articles and FAQs that users can access independently. Tier 1 is the front-line service desk, typically handling password resets, account unlocks, and routine software queries. Tier 2 involves more specialized technical agents who address problems that Tier 1 cannot resolve. Tier 3 covers engineers and architects who handle infrastructure-level problems or vendor escalations. The traditional flow was almost entirely reactive and upward-escalating. An end-user would contact Tier 1, who would attempt resolution, and if unsuccessful, escalate to Tier 2, and so on. Each escalation added time, cost, and often required the user to re-explain their problem from scratch, a phenomenon sometimes called the re-tell burden (Dostal, 2022). Research consistently found that between 60 and 80 percent of tickets arriving at Tier 1 were actually resolvable at Tier 0 if the right #knowledge_management infrastructure had been in place (Dostal and Skrbek, 2021). This structural inefficiency is precisely the gap that shift-left service theory addresses. 2.2 Bourdieu's Field Theory and the Redistribution of IT Capital Pierre Bourdieu's framework of #field_theory provides a rich sociological lens for understanding why the traditional tiered model persisted for so long despite its inefficiencies, and why shift-left thinking represents a genuine challenge to the existing order of things (Faik, Barrett and Oborn, 2020). For Bourdieu, a field is a structured social space where agents compete for different forms of capital, including economic capital, social capital, and what he called #cultural_capital, meaning the knowledge, skills, and credentials that confer advantage within a particular domain. In the traditional IT service environment, higher-tier specialists held a near-monopoly on technical #cultural_capital. Their expertise was rare, accumulated through formal qualifications and years of experience, and it was structurally protected by the architecture of escalation itself. Tier 1 agents did not have access to the deep knowledge that Tier 3 engineers possessed, and this asymmetry was embedded in the very design of service management systems. Shift-left theory, viewed through Bourdieu's lens, is essentially a project of capital redistribution: it seeks to extract knowledge from those who hold it in concentrated form and distribute it more widely through #knowledge_base articles, automated workflows, and intelligent self-service tools (Dubey, 2025; Fathi, 2020). This redistribution is not merely technical; it is political, in the Bourdieusian sense, because it challenges the established hierarchy of the service field and realigns who holds power over problem resolution. Moreover, Bourdieu's concept of #habitus, meaning the internalized dispositions and ways of thinking that agents carry with them, helps explain cultural resistance to shift-left adoption. Service professionals who built their careers and identities on being the experts to whom others turned may resist models that commodify or automate their expertise. This is not mere stubbornness; it reflects a deep disruption to the habitus of the ITSM field, a disruption that organizations ignore at their peril during implementation. 2.3 World-Systems Theory and the Global Spread of ITSM Outsourcing Immanuel Wallerstein's #world_systems_theory offers a complementary perspective on why shift-left service theory has gained traction specifically in the current global economic moment. World-systems theory describes the global economy as a hierarchical system in which core nations extract value from peripheral and semi-peripheral nations through the control of capital-intensive production and knowledge work (Faik, Barrett and Oborn, 2020). In the context of IT services, this dynamic has been visible for decades through offshore outsourcing: organizations in core economies like the United States, the United Kingdom, and Australia historically moved their Tier 1 and Tier 2 service desk operations to lower-wage labor markets, primarily in India, the Philippines, and Eastern Europe. Shift-left service theory disrupts this arrangement in interesting ways. When #automation and #self_service can resolve 50 to 60 percent of all service requests without human involvement (Ahmed, Rahman and Ashrafuzzaman, 2023), the economics of offshore outsourcing shift. If the bulk of routine tickets can be deflected entirely, the economic justification for large offshore Tier 1 workforces diminishes. This creates a form of structural adjustment within the world system: the peripheral workforce that was previously employed in IT service escalation chains faces displacement by intelligent automation, while organizations in core economies redeploy savings toward higher-value IT innovation. This is not an argument for or against offshore outsourcing; it is a structural observation that any serious academic treatment of shift-left theory must acknowledge. 2.4 Institutional Isomorphism and the Convergence of ITSM Practices Perhaps the most immediately applicable sociological theory to the spread of shift-left practices is DiMaggio and Powell's #institutional_isomorphism framework, which describes the tendency of organizations within the same field to become increasingly similar over time due to three types of pressure: coercive, mimetic, and normative (Patalon and Wyczisk, 2024; Lee and Carruthers, 2024; Jeyaraj and Zadeh, 2020). Coercive isomorphism arises from regulatory or contractual mandates. In ITSM, this is visible through the widespread adoption of ITIL certification requirements by large enterprise clients who demand that their service providers operate according to standardized frameworks. When a major bank requires all IT vendors to comply with ITIL 4 service practices, those vendors face coercive pressure to adopt shift-left principles as part of their compliance strategy (Akbar et al., 2026; Dande et al., 2024). Mimetic isomorphism arises when organizations facing uncertainty imitate the practices of organizations they perceive as successful. The dramatic well-publicized successes of organizations like ServiceNow, which built its entire business model around automated, self-service ITSM, created powerful mimetic pressure across industries (Sumedha, 2024). When companies see a competitor reduce its service desk headcount by 40 percent while simultaneously improving user satisfaction, imitation is the rational response. Normative isomorphism arises from professional networks, certification bodies, and educational institutions that define best practice. The ITIL 4 framework, HDI certifications, and academic programs in information systems all increasingly encode shift-left principles as the standard of excellence, creating normative pressure that makes deviation from the model feel like professional inadequacy (Elizarov, 2025; Shastri and Thampi, 2021). Taken together, these three isomorphic pressures explain why shift-left service theory has spread so uniformly across industries that one might otherwise expect to adopt very different approaches to IT support. The sociology of institutional fields, not just the technology itself, is driving convergence. 2.5 The ITIL 4 Framework and the Shift-Left Philosophy The fourth iteration of the Information Technology Infrastructure Library, known as ITIL 4, represents the closest official acknowledgment of shift-left principles within established ITSM frameworks (Al-Ashmoery et al., 2024). ITIL 4 moved away from the rigid process-based thinking of earlier versions and toward a more flexible, value-chain oriented approach that explicitly embraces #agile, #DevOps, and lean principles. Its Service Value System encourages organizations to design service delivery around value creation for users rather than around internal escalation hierarchies. This is philosophically aligned with shift-left thinking: if the goal is to create value for the user as quickly and efficiently as possible, then anything that delays resolution without adding value is waste in the Lean sense of the term. Setyowibowo, Raharjo and Fitriani (2025) demonstrated this alignment concretely in a logistics company case study where implementing an ITIL v4-guided chatbot improved service level agreement response rates by 26 percent and resolution rates by enough to exceed the company's own targets. The shift-left logic was embedded in the chatbot design: the system was built to resolve issues at the first point of contact, using ITIL 4's service value chain as the architectural backbone. 3. Method This article employs a qualitative systematic literature synthesis methodology, consistent with established practices for conceptual and theoretical review articles in information systems research. The approach follows the structure of a narrative synthesis, which is appropriate when the research objective is to build theoretical understanding and connect empirical findings to broader conceptual frameworks rather than to produce a statistical meta-analysis (Ahmed, Rahman and Ashrafuzzaman, 2023). Sources were identified through database searches of Semantic Scholar, Google Scholar, and ITSM-focused academic repositories using search terms including #shift_left_service, #IT_service_management, #ITSM_automation, #self_service_portal, AI-powered service desk, chatbot IT support, ITIL 4, knowledge management ITSM, and institutional isomorphism IT. The search was restricted to sources published between 2020 and 2026 to ensure recency and relevance to contemporary practice environments. Sources were screened on the basis of relevance to IT service management, theoretical grounding, and empirical contribution. Sources that were purely promotional, commercially oriented, or lacked peer review were excluded. A total of 18 sources were selected for primary synthesis, supplemented by theoretical works on Bourdieu, world-systems theory, and institutional isomorphism. Data were extracted thematically, organized around the dimensions of: automation and AI adoption; self-service portal design; knowledge management; cost and efficiency metrics; user satisfaction; and organizational and structural barriers. The use of multiple theoretical lenses, Bourdieu, world-systems theory, and institutional isomorphism, was deliberate and follows the practice of theoretical triangulation, which strengthens the validity of qualitative analysis by ensuring that no single framework overdetermines the interpretation of empirical findings (Faik, Barrett and Oborn, 2020; Yayla and Lei, 2020). Limitations of the method include the reliance on published abstracts for some sources where full texts were not accessible, the exclusion of grey literature such as industry white papers and vendor reports, and the inherent challenge of synthesizing findings across organizations with very different IT environments, user populations, and cultural contexts. These limitations are acknowledged in the discussion of findings where relevant. 4. Analysis 4.1 The Mechanics of Shift-Left Implementation: Automation as the Core Engine The operational core of #shift_left_service_theory is #automation. Without automation, there is no meaningful capacity to resolve issues at the point of contact rather than through escalation. The literature reviewed consistently identifies automation as the primary mechanism through which shift-left principles are translated from strategy into measurable outcomes. Shastri and Thampi (2021) provide a foundational taxonomy, building on Bloom's Taxonomy to classify ITSM automation into levels ranging from basic task automation, such as auto-routing of tickets, to cognitive automation involving natural language processing and machine learning. Their model is important because it makes clear that not all automation is equal: organizations that implement only basic rule-based automation capture a fraction of the potential benefits compared to those that deploy intelligent, learning-capable systems. The analysis of rule-based automation by Kolla (2021) describes how explicit rule engines can handle incident response and change management workflows using predefined decision trees. This approach works well for highly predictable, structured requests, such as password resets, account provisioning, and standard software installations, where the resolution path is known and can be encoded in advance. Kolla's work describes what might be called the first generation of shift-left automation: reliable, auditable, but limited in its ability to handle novel or ambiguous requests. The more powerful second generation involves #AI_driven automation. Battapothu (2023) describes how AI-driven cloud automation integrates AI components across IT service management pipelines, enabling more efficient routing, faster triage, and auto-remediation of incidents. Crucially, AI-driven approaches reduce what Battapothu calls the mean-time-to-repair, shifting from reactive to anticipatory models of service resolution. Sivakumer et al. (2025) extend this analysis with a technical model of intelligent automation and predictive analytics applied to ITSM functions, reporting steep improvements in incident resolution time and proactive issue identification. The system described in their paper uses machine learning algorithms to predict incidents before they fully manifest, which is the logical endpoint of shift-left thinking: not just resolving issues quickly at the front line but preventing them from reaching the front line at all. Jyoti (2025) conducted a cross-sector empirical review drawing on 122 peer-reviewed studies and found that organizations successfully implementing automation in change management workflows reduced change lead times by up to 70 percent and audit preparation time by 60 percent. These figures illustrate the scale of efficiency gains available through systematic shift-left automation, but Jyoti also notes significant sectoral variation: finance organizations prioritized regulatory compliance, healthcare focused on HIPAA-aligned traceability, and manufacturing adopted hybrid strategies combining automation with digital twin and IoT integration. This sectoral heterogeneity is important because it confirms that shift-left is not a one-size-fits-all prescription; it must be adapted to the specific risk, regulatory, and cultural context of each organization. 4.2 Chatbots and AI-Assisted Self-Service: Empirical Evidence Within the automation landscape, #chatbots and #AI_powered_virtual_assistants represent perhaps the most visible and user-facing implementation of shift-left principles. The evidence on their effectiveness is now substantial and consistent. Torres, Barraza and Castaneda (2024) conducted a study of a Dialogflow-based chatbot deployed in a service desk environment in Florida and found a 20 percent average increase in user satisfaction alongside a projected cost saving of 42.26 percent compared to hiring additional human personnel. These figures are particularly striking because they come from a relatively small implementation, suggesting that even modest AI deployments can deliver significant shift-left benefits. Kim, Sachdeva and Dennis (2025) conducted three separate experiments comparing chatbot-based self-service with traditional search tool-based self-service in IT support, using the same large knowledge base for both. All three experiments found higher user satisfaction with the chatbot, and the authors identified two mechanisms driving this advantage: perceived assistance, meaning users felt more actively supported by the chatbot, and co-creation of questions, meaning the conversational interface helped users articulate their problems more precisely, which led to better-matched solutions. The finding that 57 percent of user questions were resolved in one or two conversation turns is particularly important for shift-left practitioners: it confirms that the majority of issues can be handled at the point of contact with no human escalation required. Dange et al. (2025) report even more striking results from a federated transformer architecture deployed in an enterprise service desk environment, achieving 93.2 percent intent classification accuracy and 88.6 percent user satisfaction while automating 50 percent of routine queries. The federated learning component of their system is notable because it allows the model to improve continuously from user interactions across organizational boundaries without compromising data privacy, which addresses one of the key objections to AI deployment in regulated industries. Yusuf (2025) evaluated a hybrid LLM and retrieval architecture across more than 200,000 enterprise support tickets and found a 42 percent reduction in average handling time and a 37 percent increase in first-contact resolution. Employee feedback indicated particularly strong improvements for network, access control, and device provisioning tasks, which are among the most common categories of IT support requests. The risk analysis in Yusuf's paper is equally informative: failure conditions related to outdated documentation and ambiguous user prompts represent the most significant threats to chatbot performance, pointing to the critical role of #knowledge_management quality as a precondition for successful shift-left automation. 4.3 The Knowledge Management Foundation A consistent theme across the literature is that #shift_left_automation is only as good as the #knowledge_base that underlies it. This may seem obvious, but its implications are frequently underestimated by organizations eager to deploy AI without first investing in the documentation and curation of their service knowledge assets. Dostal (2022) argues in his analysis of knowledge management methods in ITSM that the service desk functions as a critical communication platform whose quality is fundamentally dependent on the availability of the right knowledge to the right people at the right time. His work identifies ticketing system design and on-the-job training as essential knowledge management components that are often neglected in favor of technology investment. This observation aligns with Fathi's (2020) finding, based on interviews with 23 IT service desk managers in the higher education sector, that the effectiveness of knowledge application rather than knowledge creation is what actually improves service desk performance. Organizations may create extensive knowledge bases, but if agents and automated systems cannot find, trust, and apply that knowledge effectively, the investment is wasted. Dubey (2025) examines how analytics integration transforms traditional knowledge management systems from what he calls static repositories into dynamic, responsive assets. The key insight is that analytics reveal which knowledge articles are being accessed, which are leading to successful resolutions, and which are being ignored or abandoned, allowing organizations to continuously improve their knowledge base based on real-world usage data rather than assumptions about what users need. This evidence-based approach to knowledge governance is what Dubey calls self-optimizing knowledge ecosystems, and it represents the mature form of shift-left knowledge management. Dostal and Skrbek (2021) propose a theoretical model of an automated service desk system that combines text mining, a virtual agent, an expert system, a customer intent detector, and a ticketing system. Their model illustrates how knowledge management and automation are inseparable in shift-left design: the virtual agent can only resolve issues automatically if it has access to a well-structured, accurate, and current knowledge repository. Without knowledge management as a foundation, automation becomes a sophisticated mechanism for delivering wrong answers quickly. 4.4 Cost Savings and Efficiency: Quantitative Evidence One of the most important empirical contributions of the shift-left literature is the growing body of quantitative evidence on cost savings and efficiency gains. For students and practitioners, these figures provide the business case that often drives organizational adoption. Ahmed, Rahman and Ashrafuzzaman (2023), in a systematic review of 563 peer-reviewed studies, found that AI-driven troubleshooting models reduced mean time to resolution by 50 to 60 percent, that predictive maintenance models achieved up to 90 percent accuracy in failure detection with a 40 to 50 percent reduction in unplanned downtime, and that AI-powered virtual assistants autonomously managed 50 to 60 percent of IT service requests while reducing first-level support workload by 40 percent. These are the most comprehensive quantitative benchmarks currently available in the literature and should be treated as representative ranges rather than guarantees, given the diversity of organizational contexts across the 563 studies reviewed. Jyoti's (2025) cross-sector study provides a useful sector-level breakdown: change lead time reductions of up to 70 percent, rollback incident reductions of 40 percent, and audit preparation effort reductions of 60 percent. The variation across sectors confirms that the magnitude of shift-left benefits depends heavily on organizational maturity, the quality of existing ITSM processes, and the rigor of implementation. Verma (2025) reports findings from AIOps implementations across diverse industries showing average reductions of 73 percent in detection time and 62 percent in resolution time. Her maturity model for AIOps adoption identifies critical success factors including executive sponsorship, cross-functional collaboration, and data quality as the primary determinants of whether organizations capture the upper or lower end of these potential gains. For #self_service_portals specifically, Annamalai (2025) documents transformations from traditional walk-in service centers to fully digital self-service models, reporting dramatic improvements in customer take-up rates and significant reductions in the cost of physical service center operations. His analysis of the Siebel eService portal architecture highlights how front-end user interface design, specifically navigation optimization and multi-platform accessibility, is just as important as back-end automation in achieving high rates of self-service adoption. 4.5 The Role of ITIL and DevOps Integration The integration of #ITIL_4 with #DevOps and Agile methodologies is increasingly recognized as a critical enabler of shift-left service theory at the organizational level. Al-Ashmoery et al. (2024) argue that ITIL 4's flexibility makes it uniquely suited to absorbing lean and agile principles without losing its governance foundations. Their analysis shows how organizations that successfully integrate these frameworks can simultaneously improve service delivery speed and maintain the risk and compliance controls that regulated industries require. This integration is particularly important for organizations that want to extend shift-left principles from the service desk into the software development pipeline itself, where the original meaning of #shift_left testing originated. Elizarov (2025) provides an overview of innovative approaches to ITSM automation that highlights how DevOps pipelines, continuous integration and continuous deployment workflows, and automated policy enforcement tools together create the infrastructure within which shift-left service design can operate at scale. The connection between DevOps and shift-left ITSM is not merely technical; it is cultural. Both philosophies share a commitment to moving quality assurance and problem-solving earlier in the production and delivery chain rather than relying on end-of-pipe inspection and correction. The cultural alignment between DevOps teams and shift-left service desk teams, when it exists, creates organizational conditions that are significantly more conducive to successful implementation (Jyoti, 2025). 4.6 Barriers and Resistance: The Limits of Shift-Left Theory A balanced academic treatment of shift-left service theory requires honest engagement with its limitations and the barriers that organizations routinely encounter in implementation. Cultural resistance is consistently cited as the most significant barrier. As noted in the Bourdieu analysis above, professionals whose expertise and organizational status are tied to hierarchical knowledge structures may resist models that democratize access to that knowledge. Sumedha (2024) explicitly identifies resistance to change as one of the most common challenges in ServiceNow implementations, alongside integration difficulties with legacy systems. Algorithmic bias represents a second and increasingly important concern. Ahmed, Rahman and Ashrafuzzaman (2023) note that AI-driven ticketing systems face challenges including algorithmic bias and model misclassification risks that can disproportionately affect certain categories of requests or certain user groups. If an AI triage system is trained predominantly on ticket data from one user demographic or one type of technical environment, its accuracy may be significantly lower for users or systems that fall outside the training distribution. This is not a trivial concern in diverse organizations where IT environments vary significantly across departments or locations. Data quality is a third barrier. Malla (2025) describes in detail how a legacy ITSM system with poorly categorized ticket data created major complications for deploying an AI-powered chatbot, because the AI model could not learn effectively from data that had not been consistently labeled. The lesson is that AI-driven shift-left automation requires a prior investment in data hygiene that is often more time-consuming and expensive than the AI deployment itself. Kwarteng, Idoko and Azonuche (2025) highlight the risks of implementing analytics-driven incident management without adequate data governance frameworks, pointing to the risk that automation decisions made on the basis of poor-quality data can create new service failures more severe than the ones they were designed to prevent. 5. Findings Synthesizing the analysis above, this article advances the following major findings: Finding 1: Shift-left service theory delivers substantial, measurable efficiency gains when properly implemented. The empirical evidence is now sufficiently large and consistent to conclude that well-designed shift-left systems, combining automation, AI-driven triage, chatbots, and self-service knowledge management, produce reductions in resolution time ranging from 42 to 90 percent and reduce first-level support workloads by 40 to 60 percent across different organizational contexts (Ahmed, Rahman and Ashrafuzzaman, 2023; Jyoti, 2025; Sivakumer et al., 2025). These are not marginal gains; they represent a fundamental restructuring of the economics of IT service delivery. Finding 2: The quality of knowledge management infrastructure is the single most important determinant of shift-left success. This finding challenges the common assumption that shift-left transformation is primarily a technology problem. The evidence consistently shows that organizations with poor knowledge management practices, outdated documentation, inconsistent ticket categorization, or low knowledge base utilization rates fail to capture the benefits of even sophisticated automation investments (Dostal, 2022; Dostal and Skrbek, 2021; Dubey, 2025; Yusuf, 2025). #knowledge_management must be treated as the foundation, not the afterthought, of shift-left design. Finding 3: Institutional isomorphism is a powerful driver of shift-left adoption, but it also creates risks of superficial compliance. The three mechanisms of isomorphism, coercive, mimetic, and normative, combine to create strong organizational pressure toward shift-left adoption (Patalon and Wyczisk, 2024; Jeyaraj and Zadeh, 2020; Lee and Carruthers, 2024). However, when organizations adopt shift-left practices primarily to signal legitimacy rather than to genuinely restructure their service delivery, the result is often a surface-level implementation that deploys chatbots or self-service portals without the knowledge management and cultural change infrastructure needed to make them effective. This pattern of decoupled adoption is well described in the institutional theory literature and represents one of the most common modes of shift-left failure. Finding 4: The Bourdieusian redistribution of IT capital through shift-left design is real but contested. The movement of technical knowledge from specialized high-tier agents into automated systems and accessible knowledge bases genuinely redistributes the forms of capital that the ITSM field values and rewards (Faik, Barrett and Oborn, 2020; Dubey, 2025). This redistribution improves user empowerment and organizational efficiency, but it also disrupts professional identities and creates resistance that organizations must manage actively. Shift-left implementation that ignores the social and political dimensions of #capital_redistribution is significantly more likely to encounter resistance and implementation failure. Finding 5: World-systems dynamics create structural pressures on global ITSM workforce arrangements that shift-left automation is accelerating. The capacity to automate Tier 1 and Tier 2 IT support at scale challenges the economic model of offshore IT service delivery that has characterized global ITSM outsourcing for decades (Faik, Barrett and Oborn, 2020). While the full implications of this shift are still unfolding, the trajectory is clear: the labor-intensive, low-skill components of IT service chains are being automated, and the remaining human workforce is being pushed toward higher-complexity, higher-judgment work that automation cannot yet replicate. Finding 6: Chatbot and AI-assisted self-service improve user satisfaction across multiple dimensions. Kim, Sachdeva and Dennis (2025) provide the strongest experimental evidence on this point, showing that chatbots outperform search-based self-service on user satisfaction measures due to perceived assistance and co-creation dynamics. This finding matters for shift-left practitioners because it challenges the assumption that users always prefer self-service to human interaction: what users actually prefer is effective, responsive, and intelligently guided resolution, and well-designed chatbots can deliver this more consistently than keyword-based search tools. Finding 7: Hybrid human-AI models represent the current best practice. Across the literature, there is strong and consistent consensus that full automation is neither achievable nor desirable for all categories of IT issues (Klimenkova, 2025; Ahmed, Rahman and Ashrafuzzaman, 2023; Kim, Sachdeva and Dennis, 2025). The most effective implementations use automation and self-service to handle the high-volume, low-complexity requests that constitute the majority of ticket load, while preserving a skilled human tier for complex, sensitive, or ambiguous issues. This hybrid model captures the efficiency gains of shift-left design without sacrificing the quality and judgment that genuinely complex problems require. 6. Discussion The evidence assembled in this article supports a clear conclusion: #shift_left_service_theory is not a management fad but a theoretically grounded and empirically validated approach to IT service delivery that is reshaping how organizations manage their technology operations. At the same time, the analysis reveals important nuances that practitioners and students must understand to avoid the common failure modes of superficial or culturally insensitive implementation. The application of Bourdieu's field theory exposes the social dimension of shift-left implementation that purely technical accounts miss. When organizations redeploy knowledge from specialized professionals into automated systems, they are not simply optimizing a workflow; they are realigning the distribution of symbolic and technical capital within the organizational field. Change managers who understand this dynamic are better equipped to anticipate resistance, design appropriate transition pathways for displaced workers, and build the organizational legitimacy that sustained shift-left transformation requires. World-systems theory, applied to the global ITSM labor market, raises equity questions that the ITSM literature rarely engages with. The workers most immediately affected by the automation of Tier 1 and Tier 2 support functions are disproportionately located in lower-wage peripheral economies. This is not an argument against automation; the efficiency gains are real and significant. But it is an argument for policy engagement with the social consequences of #AI_driven_automation in service industries, and it connects the technical practice of shift-left design to broader debates about the future of work in the global digital economy. The institutional isomorphism framework helps explain a paradox that practitioners frequently observe: organizations in the same industry adopt apparently similar shift-left tools and frameworks but achieve very different outcomes. The explanation lies in the distinction between substantive adoption and ceremonial adoption. Organizations that adopt shift-left practices primarily to meet external legitimacy expectations, whether from regulatory bodies, industry associations, or competitive peer groups, tend to implement the visible signifiers of the model, the chatbot, the self-service portal, the AI ticket classifier, without investing in the less visible but more critical foundations of knowledge management quality, workforce training, and cultural alignment. Organizations that adopt shift-left practices because they genuinely believe in their value and invest accordingly in the full implementation stack tend to achieve the upper end of the efficiency gains documented in the literature. For students of information systems and organizational theory, this article illustrates the broader principle that technology implementations never occur in a social vacuum. The #digital_transformation of IT service delivery is simultaneously a technical project, an organizational change project, and a political project in the Bourdieusian sense. Treating it as only the first of these three is a reliable recipe for the kind of expensive, partial failure that the ITSM literature documents with depressing regularity. 7. Conclusion This article has examined #shift_left_service_theory through empirical, theoretical, and sociological lenses, arguing that its value lies not only in the efficiency gains it produces but in the fundamental rethinking of how #IT_service_value is created and who gets to participate in that creation. The core claim of the theory is simple but radical: bring the solution to the user rather than bringing the user to the solution. Every technological innovation discussed in this article, from rule-based automation to AI-powered chatbots to predictive AIOps, is in service of this central principle. The theoretical contributions of this article are threefold. First, Bourdieu's framework of field, capital, and habitus provides a vocabulary for understanding the social and political dynamics of shift-left implementation that purely technical accounts cannot capture. Second, world-systems theory connects the local practice of #ITSM_automation to global labor market dynamics and raises important equity questions about who benefits from the efficiency gains of automation and who bears its costs. Third, institutional isomorphism explains the rapid and uniform spread of shift-left practices across industries while also identifying the risk of ceremonial adoption that produces visible compliance without substantive change. The practical recommendations that flow from this analysis are clear. Organizations planning shift-left implementations should invest as heavily in #knowledge_management infrastructure as in automation technology, because the two are inseparable. They should treat cultural resistance not as an obstacle to be overcome but as a signal of legitimate concerns about professional identity and organizational equity that deserve to be addressed directly. They should design hybrid human-AI models that preserve meaningful human roles for complex, sensitive, or novel service requests. And they should measure the quality of shift-left implementation not only through efficiency metrics like #mean_time_to_resolution and #ticket_deflection_rate but through user satisfaction measures that capture whether the shift-left experience actually feels helpful to the people it is designed to serve. For students, the broader lesson of this article is that the most important problems in information systems are rarely purely technical. The question of who resolves an IT issue, and where in the organizational structure that resolution happens, is a question about power, knowledge, economic organization, and institutional legitimacy. Shift-left service theory offers a powerful answer to the technical challenge of efficient service delivery; the sociological frameworks applied in this article suggest that the most important work of shift-left implementation happens not in the code or the workflow diagram but in the organizational culture that either embraces or resists the redistribution of the capacity to solve problems. Hashtags #shift_left_service #IT_service_management #ITSM_automation #self_service_portal #end_user_empowerment #knowledge_management #first_contact_resolution #mean_time_to_resolution #digital_transformation #ITIL4 #institutional_isomorphism #AI_powered_service_desk #chatbot_support #DevOps_integration #ticket_deflection #service_desk_automation #proactive_IT_support #intelligent_ITSM #Bourdieu_field_theory #world_systems_IT #AIOps #helpdesk_innovation #tiered_IT_support #incident_management_automation #user_experience_IT References Ahmed, S., Rahman, A. and Ashrafuzzaman, M. (2023) 'A Systematic Review of AI and Machine Learning-Driven IT Support Systems: Enhancing Efficiency and Automation in Technical Service Management', American Journal of Scholarly Research and Innovation, doi: 10.63125/fd34sr03. Akbar, A., Pratama, R.V., Purnomo, C., Wanandi, M.R. and Akbar, K. (2026) 'IT Service Management: Implementation of ITIL Framework in Modern Organizations', Devotion: Journal of Research and Community Service, doi: 10.59188/devotion.v7i3.25642. Al-Ashmoery, Y., Chaabi, Y., Lekdioui, K., Al-fuhaidi, B., Alwesabi, K., Haider, H. and Zaid, A. (2024) 'Impact of Integrating Lean, Agile, and DevOps with ITIL4 Framework for Modern IT Service Management', 2024 1st International Conference on Emerging Technologies for Dependable Internet of Things (ICETI), doi: 10.1109/ICETI63946.2024.10777262. Annamalai, J.R. (2025) 'Siebel eService Self-Service Portal Architecture: From Walk-in Centers to Digital Transformation', Journal of Computer Science and Technology Studies, 7(7), doi: 10.32996/jcsts.2025.7.7.24. Battapothu, V. (2023) 'AI-Driven Cloud Automation for IT Service Management Platforms', International Journal of Engineering and Extended Technologies Research, doi: 10.15662/ijeetr.2023.0506019. Dande, F., Li, X., Shofoluwe, M. and McLeod, A. (2024) 'ITIL Service Configuration Management as a Driver of Enterprise Digital Transformation: A Quantitative Research Study', Communications of the IBIMA, doi: 10.5171/2024.917754. Dange, V., Sawai, H., Mule, M., Matre, A., Shedbale, S., Pise, P. and Joshi, K. (2025) 'Semantic-Aware Helpdesk Resolution Using Federated Transformers and Real-Time Vector Matching and LLaMA', 2025 2nd Asia Pacific Conference on Innovation in Technology (APCIT), doi: 10.1109/APCIT65661.2025.11411434. Dostal, M. (2022) 'Enhancement of Selected Knowledge Management Methods in ITSM', Journal of Information and Knowledge Management, doi: 10.1142/s0219649222500733. Dostal, M. and Skrbek, J. (2021) 'Automation of Service Desk: Knowledge Management Perspective', International Joint Conference on Knowledge Discovery, Knowledge Engineering and Knowledge Management, doi: 10.5220/0010693100003064. Dubey, H. (2025) 'Transforming Knowledge Management Systems with Analytics', European Journal of Computer Science and Information Technology, 13(4), doi: 10.37745/ejcsit.2013/vol13n48101115. Elizarov, A. (2025) 'Innovative Approaches to Automation of the IT Services Management System (ITSM)', Digital Transformation in the Economy of the Transport Complex, doi: 10.12737/conferencearticle_67893109d0aac3.57196670. Faik, I., Barrett, M. and Oborn, E. (2020) 'How Information Technology Matters in Societal Change: An Affordance-Based Institutional Perspective', MIS Quarterly, 44(3), doi: 10.25300/MISQ/2020/14193. Fathi, A. (2020) 'Enablers for Effective Knowledge Application Capability in Information Technology Service Desk Function in Australia', Australian Journal of Business and Social Sciences and IT, 6(1), pp. 1-14. Jeyaraj, A. and Zadeh, A. (2020) 'Institutional Isomorphism in Organizational Cybersecurity: A Text Analytics Approach', Journal of Organizational Computing and Electronic Commerce, doi: 10.1080/10919392.2020.1776033. John, J.T.S., Uma, C. and Jabez, J. (2022) 'A Review of the Latest IT Service Management Solutions', i-manager's Journal on Information Technology, 11(4), doi: 10.26634/jit.11.4.19276. Jyoti, S.N. (2025) 'ITSM Based Change Management Automation in Cloud Environments: A Cross Sector Empirical Study', Review of Applied Science and Technology, doi: 10.63125/xvjst226. Kim, A., Sachdeva, A. and Dennis, A.R. (2025) 'From Self-Service to AI-Assisted Service: A Mixed-Method Study of IT Support Service Provision Using Search Tools and Chatbots', International Journal of Information Management, doi: 10.1016/j.ijinfomgt.2025.102938. Klimenkova, I.S. (2025) 'Implementation of AI-Based Chatbots for Automating Routine Query Processing in Customer Service Operations', Gostinichnoe Delo (Hotel Business), doi: 10.33920/igt-1-2512-07. Kolla, S.H. (2021) 'Rule-Based Automation for IT Service Management Workflows', Online Journal of Engineering Sciences, doi: 10.31586/ojes.2020.1360. Kwarteng, R.A., Idoko, P.I. and Azonuche, T.I. (2025) 'Optimizing IT Incident and Problem Management Through Data Analytics and ITIL-Aligned Digital Workflows', International Journal of Scientific Research in Computer Science Engineering and Information Technology, doi: 10.32628/cseit2511666. Lee, K. and Carruthers, B. (2024) 'Organizational Isomorphism during Crisis: Market Practices and U.S. Art Museums, 2006-2011', Socius: Sociological Research for a Dynamic World, doi: 10.1177/23780231241258607. Malla, P. (2025) 'Improving IT Support Efficiency through an AI-Powered ITSM Chatbot', Journal of Advances in Developmental Research, doi: 10.71097/ijaidr.v16.i2.1662. Patalon, M. and Wyczisk, A. (2024) 'Mapping Digital Transformation of Municipalities through the Lens of Institutional Isomorphism', International Journal on Social and Education Sciences, doi: 10.46328/ijonses.701. Setyowibowo, D., Raharjo, T. and Fitriani, A.N. (2025) 'Project Management Strategy for Chatbot Implementation Based on ITIL v4: A Logistics Company Case', CommIT Journal, doi: 10.21512/commit.v19i1.12106. Shastri, A. and Thampi, G. (2021) 'Automation of IT Service Management Processes', 2021 International Conference on Advances in Computing, Communication, and Control (ICAC3), doi: 10.1109/icac353642.2021.9697243. Sivakumer, D., Mohan, A., Ugli, M.I.R., Mamadiyarov, Z. and Xolmatova, A. (2025) 'Intelligent Automation and Predictive ITSM for Service Optimisation', 2025 International Conference on Sustainability, Innovation and Technology (ICSIT), doi: 10.1109/ICSIT65336.2025.11294337. Sumedha, M. (2024) 'A Comprehensive Survey on ServiceNow for IT Service Management', International Journal of Scientific Research in Engineering and Management, doi: 10.55041/ijsrem35395. Torres, J.O., Barraza, V.X. and Castaneda, P.S. (2024) 'Chatbot Based on Conversational Artificial Intelligence for the Attention of an IT Service Desk in Florida', 2024 International Conference on Natural Language Processing (ICON), doi: 10.1109/ICNLP60986.2024.10692529. Verma, D. (2025) 'Beyond Reactive IT: Quantifying the Transformative Impact of AIOps on Service Management', International Conference on Computer Science, Artificial Intelligence, Machine Learning (ICCSAIML 25), doi: 10.56472/iccsaiml25-132. Yayla, A. and Lei, Y. (2020) 'Information Technology Implementation and Organizational Change: A Dissipative Structure Theoretical Lens', Journal of the Southern Association for Information Systems, doi: 10.17705/3JSIS.00011. Yusuf, R. (2025) 'Intelligent IT Service Desks Using Hybrid LLM-Retrieval Architectures for Enterprise Knowledge Management', Journal of Multidisciplinary Knowledge, 5(2), doi: 10.36676/jmk.v5.i2.94.

This article examines how #Expectancy_Disconfirmation_Theory (#EDT) functions as a rigorous evaluative lens for measuring the success of #IT_services by continuously comparing actual #end_user_experience against the formal performance standards documented in #Service_Level_Agreements (#SLAs). Drawing on foundational consumer behavior scholarship and extending it into the field of #IT_service_management (#ITSM), the article argues that user #satisfaction is not a static outcome but a dynamic, evolving judgment formed through the ongoing comparison of expectations and perceived performance. The study integrates three additional theoretical frameworks: Pierre Bourdieu's concepts of field, habitus, and capital; #world_systems_theory as articulated by Immanuel Wallerstein; and #institutional_isomorphism as described by DiMaggio and Powell. Together, these frameworks help explain why SLA standards take the particular shapes they do, how organizational power structures influence both the setting of #service_expectations and the interpretation of whether those expectations have been met, and why IT organizations across different sectors tend to converge on similar #service_quality benchmarks. The article adopts a qualitative, conceptual methodology combining a structured literature review with theoretical synthesis. Key findings suggest that EDT is most effective as an evaluation instrument when SLAs are designed not merely as contractual documents but as living benchmarks that reflect genuine user needs, regularly updated through feedback cycles. The article concludes that managing #user_satisfaction in IT services requires treating EDT not as a post-hoc audit tool but as a continuous, embedded governance mechanism that sits at the intersection of technical performance data and human judgment. Keywords: Expectancy Disconfirmation Theory, Service Level Agreement, IT Service Management, End-User Satisfaction, Institutional Isomorphism, Bourdieu, World-Systems Theory, Digital Service Quality, ITIL, Continuous Service Improvement 1. Introduction The question of whether an #IT_service has succeeded is deceptively simple. An IT department might report that its helpdesk resolved 97 percent of tickets within the agreed response window, that server uptime held at 99.8 percent across the quarter, and that no critical system failures occurred during business hours. By every metric embedded in the organization's #SLA, performance appears excellent. Yet user satisfaction surveys tell a different story: employees feel that the helpdesk responses are curt and unhelpful, that the one outage that did occur happened at the worst possible moment, and that the IT department does not understand the actual work that the organization does. The metrics show success; the users feel failure. This gap between #measured_performance and perceived performance sits at the heart of #Expectancy_Disconfirmation_Theory. First systematically developed by Oliver (1980) in the context of consumer satisfaction with purchased products and services, EDT proposes that satisfaction is not simply a function of how well something performs in absolute terms. Instead, satisfaction emerges from a psychological comparison: users evaluate whether the service they received matches, exceeds, or falls short of what they expected it to be. When perceived performance meets or exceeds prior expectations, the result is confirmation, and satisfaction tends to follow. When perceived performance falls short of expectations, the result is negative disconfirmation, and dissatisfaction follows. When performance exceeds expectations, positive disconfirmation occurs, and users may report delight rather than mere satisfaction. Applied to the field of #ITSM, EDT provides a sophisticated framework for understanding why technically compliant IT services can still produce dissatisfied users, and conversely why services that occasionally miss their numerical targets can still generate strong user loyalty. The theory draws attention to the role of #expectations themselves: where do user expectations come from, are they realistic, who shapes them, and how do they change over time? This is where the SLA enters the picture. An SLA is, formally, a contract between a #service_provider and its users that defines the terms of service delivery: what services will be provided, at what quality level, measured by what metrics, and with what consequences for non-compliance (Hiles, 1994; Ahmad et al., 2020). In an EDT framework, the SLA represents the formal, institutionally defined expectation baseline against which actual service delivery will be evaluated. The SLA is the document that says, in effect, "this is what good service looks like for this organization." When an end user's perception of received service is compared against that baseline, EDT predicts the direction and intensity of their satisfaction response. However, SLAs are never neutral documents. They are produced within specific organizational and institutional contexts, shaped by power dynamics, professional norms, and competitive pressures that operate far beyond the immediate relationship between a single user and a single service desk. This is where the broader theoretical frameworks of Bourdieu, #world_systems_theory, and #institutional_isomorphism become relevant. Bourdieu's sociology of practice helps explain how the field of IT service management is structured around particular forms of capital, and how the habitus of IT professionals leads them to produce SLA documents that reflect their own professional assumptions rather than the lived experience of end users (Richardson and Howcroft, 2006). World-systems theory highlights how global hierarchies of technical expertise and vendor power shape the options available to organizations in different positions within the global economy. And institutional isomorphism explains why SLA templates, ITIL frameworks, and IT governance standards look remarkably similar across organizations that have very different sizes, cultures, and service needs (Pal and Ojha, 2017; Patalon and Wyczisk, 2024). The primary purpose of this article is to synthesize these frameworks into a coherent argument about how EDT can and should function as a continuous measurement mechanism for IT service success, rather than a periodic audit tool applied only when problems become visible. The article is structured as follows: Section 2 provides background on EDT and its application to information systems, along with an introduction to the supplementary theoretical frameworks. Section 3 describes the methodological approach. Section 4 presents the conceptual analysis. Section 5 reports findings organized around the key dimensions of EDT-based IT service evaluation. Section 6 draws conclusions and implications for practice and future research. 2. Background and Theoretical Framework 2.1 Origins and Structure of Expectancy Disconfirmation Theory Oliver's (1980) original formulation of EDT emerged from dissatisfaction with earlier models of consumer satisfaction that treated it as a simple function of product quality or value. Oliver observed that satisfaction is inherently relational: it depends on the relationship between what was expected and what was received, not on what was received alone. His model identified four key constructs: (1) prior expectations, which represent the user's pre-service beliefs about likely performance; (2) perceived performance, which is the user's assessment of how the service actually performed during the experience; (3) disconfirmation, which is the cognitive comparison between expectations and perceived performance, yielding a positive, negative, or zero result; and (4) satisfaction, which is the affective outcome of the disconfirmation judgment. This structure was adapted for the field of #information_systems by Bhattacherjee (2001), whose Expectation-Confirmation Model (#ECM) applied EDT specifically to the question of IS continuance, meaning the decision to continue using an information system after initial adoption. Bhattacherjee found that continuance intention was driven by satisfaction, which in turn was shaped by the confirmation of prior expectations and by the perceived usefulness of the system as experienced in actual use. This model has been widely replicated and has generated a substantial stream of research examining how EDT dynamics play out across different technology contexts including #e_commerce, #cloud_services, mobile applications, and enterprise software (Brown, Venkatesh, and Goyal, 2012; Venkatesh and Goyal, 2010). Hyun and Kim (2024), in a recent structural equation modeling study of real estate brokerage platforms, confirmed that while user expectations do not directly determine satisfaction, they exert a significant indirect effect through the expectancy-discrepancy mechanism, reinforcing the basic EDT structure and underscoring the mediating role of the comparison process itself. Christanto et al. (2024) similarly demonstrated in an IT services context that service quality perceptions operate through #user_satisfaction pathways in ways consistent with EDT predictions, confirming the model's applicability across a range of contemporary digital service environments. Venkatesh and Goyal (2010) introduced an important complication to the standard EDT model, demonstrating through polynomial modeling and response surface analysis that disconfirmation is not simply directional. Their study showed that both positive and negative disconfirmation can be associated with reduced #behavioral_intention to continue using a system, because positive disconfirmation may create expectation inflation that becomes difficult to sustain, while negative disconfirmation directly undermines trust. This finding has important implications for SLA design: an SLA that consistently sets expectations too low may paradoxically reduce user satisfaction because users feel that the organization does not take their needs seriously, even when technical performance exceeds the written targets. Deng (2014) extended the EDT framework by distinguishing between three types of disconfirmation: expectation disconfirmation (comparison against prior beliefs), desire disconfirmation (comparison against what the user ideally wanted), and norm disconfirmation (comparison against what the user believes is industry-standard good practice). This tripartite distinction is relevant for SLA management because SLAs typically address expectation disconfirmation, they set a threshold and measure against it. But users often evaluate services against desire or norm standards that no formal document has captured. 2.2 Service Level Agreements as Formal Expectation Structures An SLA is, in its simplest form, a written agreement between a service provider and a service consumer that specifies what will be delivered, at what quality, and how that quality will be measured (Ahmad et al., 2020; Paschke and Schnappinger-Gerull, 2006). In the context of IT service management, SLAs typically specify service availability in terms of uptime percentages, incident response times categorized by priority level, problem resolution targets, change management procedures, and escalation protocols. The SLA functions as both a contractual document protecting the provider and a communication tool clarifying expectations for the user. From an EDT perspective, the SLA performs a specific and critical function: it formally defines the expectation baseline against which user satisfaction judgments will be made. If an organization's SLA states that Priority 1 incidents will receive a response within fifteen minutes and resolution within four hours, then the user's expectation at the moment of experiencing a Priority 1 incident is shaped by that written commitment. Satisfaction will be determined not only by whether the incident was resolved but by whether it was resolved in a way that matches, exceeds, or falls short of that fifteen-minute and four-hour framework. Leonard (2009) argued that successful SLAs depend on the quality of the relationship between IT service providers and end users, not merely on the precision of the written terms. Sound relationships characterized by trust, mutual understanding, and open communication are necessary for SLA success because they ensure that the expectations written into the SLA actually reflect the real needs and reasonable beliefs of end users. Where relationships are poor, SLAs tend to become adversarial documents used to assign blame rather than collaborative tools for managing shared service expectations. Sherlyanita (2017) demonstrated in the context of a university IT services unit in Indonesia that the absence of a formal SLA leads users to develop idiosyncratic personal expectations with no common reference point, making it effectively impossible for the service provider to achieve consistent satisfaction outcomes. Without the SLA as a shared expectation anchor, different users judge the same service interaction by different standards, and aggregate satisfaction measures become difficult to interpret or act upon. 2.3 Bourdieu's Field Theory and the Politics of Expectation Setting Pierre Bourdieu's sociology of practice, built around the interrelated concepts of field, habitus, and capital, offers a powerful lens for understanding why SLAs take the shapes they do and whose interests they tend to serve. For Bourdieu, a field is a structured social space in which agents occupy positions defined by their relative access to relevant forms of capital, and within which they compete according to rules that are specific to that field (Richardson and Howcroft, 2006; Ignatow and Robinson, 2017). The field of IT service management has its own specific logic, its own valued forms of capital, and its own habitus. Technical capital, in the form of certified expertise in systems such as ITIL or ISO/IEC 20000, confers legitimacy and authority on IT professionals in this field. The habitus of the IT professional, formed through years of technical training and organizational experience, inclines them to understand service quality in terms of measurable technical parameters: uptime percentages, ticket closure rates, mean time to resolution. This professional habitus shapes the SLA documents that IT teams produce, because SLA authors tend to define service quality in terms that reflect their own professional experience and expertise rather than the experiential vocabulary of end users. End users, occupying a different position in the organizational field and possessing a different habitus shaped by their own professional roles, often evaluate service quality in terms that are less easily quantified: the tone of a technician's communication, the degree to which a solution actually addressed the root problem rather than the surface symptom, the extent to which IT staff seemed to understand the user's workflow. Bourdieu's concept of symbolic violence is relevant here: the imposition of one form of capital's measurement logic on those who do not share that logic can produce a kind of silent injury (Richardson and Howcroft, 2006). When users are told their service experience was excellent because the ticket was closed within SLA, while they privately feel unheard and underserved, a form of symbolic violence is at work. The application of Bourdieu's framework to EDT thus reveals that the expectation baseline defined in the SLA is not a neutral technical document. It reflects the habitus and capital of those who wrote it. Continuous measurement under EDT must therefore attend not only to whether users confirm or disconfirm the expectations written into the SLA, but to the gap between those written expectations and users' deeper desire and norm disconfirmation judgments. Organizations committed to genuine service improvement must find ways to capture and incorporate user voice in the SLA design process itself. 2.4 World-Systems Theory and Global IT Service Hierarchies Wallerstein's world-systems theory, originally developed to describe the hierarchical structure of the global capitalist economy, divides the world into core, semi-peripheral, and peripheral zones characterized by differential access to technology, capital, and organizational capacity. While world-systems theory was not developed with IT service management in mind, its framework has significant explanatory power for understanding how global hierarchies of technical expertise and vendor power shape the SLA environment in which EDT judgments are made. Core-zone organizations, typically large multinationals headquartered in economically dominant nations, tend to set the standards and templates for IT service management globally. Frameworks such as ITIL, ISO/IEC 20000, COBIT, and CMMI were developed primarily within core-zone professional and regulatory contexts. When organizations in semi-peripheral and peripheral zones adopt these frameworks, they do so not because these frameworks emerged from their own service management experience, but because adherence to core-zone standards is a condition of market legitimacy and, frequently, of access to core-zone technology vendors and their support ecosystems. The implication for EDT is significant. When a peripheral-zone organization adopts an ITIL-based SLA template developed for a core-zone context, the expectation baselines written into that SLA may not accurately reflect the service environment, available resources, or user culture of the adopting organization. Expectations defined under one world-system position may systematically produce disconfirmation outcomes when applied in another. Users in lower-resource environments may have developed expectations calibrated to their actual service context, and when those expectations are overwritten by imported standards, the EDT measurement process may generate spurious results that do not accurately capture whether users are genuinely satisfied or not. This structural argument does not suggest that global IT service standards are inherently bad or that organizations in peripheral zones should avoid them. Rather, it suggests that the expectation-setting process that underlies SLA design must be sensitive to local context, and that the EDT measurement framework should be applied in ways that capture locally meaningful satisfaction signals rather than importing evaluation criteria wholesale from different organizational and cultural contexts. 2.5 Institutional Isomorphism and the Convergence of SLA Standards DiMaggio and Powell's (1983) theory of institutional isomorphism describes the tendency of organizations within the same institutional field to become structurally similar over time, not because similarity is necessarily the most efficient configuration, but because conformity to institutionally recognized forms confers legitimacy. Three mechanisms drive isomorphism: coercive isomorphism, where external regulations or powerful partners compel adoption of particular forms; mimetic isomorphism, where uncertainty leads organizations to copy the structures of apparently successful peers; and normative isomorphism, where professional networks and educational institutions diffuse particular practices as the correct way to do things. All three mechanisms are clearly visible in the field of IT service management. Coercive isomorphism operates through regulatory requirements for IT governance, audit standards, and data protection frameworks that mandate particular SLA practices. Mimetic isomorphism operates when IT departments look to the SLA structures of comparable organizations or industry benchmarks for guidance on what reasonable service targets look like. Normative isomorphism operates through the professional certification ecosystem around ITIL, COBIT, and ISO standards, where certified practitioners carry a particular vision of correct SLA design into every organization they join (Pal and Ojha, 2017; Bennich, 2023; Patalon and Wyczisk, 2024). From an EDT perspective, institutional isomorphism helps explain why user expectations may be shaped as much by industry-wide norms as by the specific service environment of a particular organization. Users who have worked in multiple organizations, consumed IT services in different contexts, and observed industry press coverage of IT service standards bring a norm disconfirmation standard to their service evaluations that is influenced by these isomorphic processes. The SLA does not merely define what this organization promises; it implicitly positions the organization within the broader institutional field of IT service management. A SLA that falls significantly below industry norms will generate negative norm disconfirmation even when it is met, because users know that better service is available and standard elsewhere (Iden, Eikebrokk, and Marrone, 2020). 3. Method This study adopts a qualitative, conceptual methodology designed to synthesize existing theoretical frameworks and empirical research findings into a coherent analytical account of how EDT can function as a continuous measurement tool for IT service success against SLA baselines. The methodological approach consists of three components. First, a structured literature review was conducted using academic databases including Semantic Scholar, covering publications primarily from 2020 onwards, with selected foundational sources extending back to Bhattacherjee (2001) and Oliver (1980) where their theoretical contributions remain the definitive starting point for the field. Search terms were organized around four conceptual clusters: EDT and information systems continuance; SLA design, metrics, and management; institutional isomorphism and digital governance; and Bourdieu's sociology applied to information systems and digital organizations. Sources were evaluated for relevance, theoretical coherence, and quality of empirical grounding. Second, a theoretical integration exercise was performed, tracing the points of connection and tension between EDT, Bourdieu's field theory, world-systems theory, and institutional isomorphism as they apply to the specific problem of IT service evaluation. This involved identifying what each framework contributes to understanding the expectation-formation process, the performance-evaluation process, the disconfirmation judgment, and the satisfaction outcome. Third, the integrated theoretical framework was applied to a conceptual case analysis examining how continuous EDT measurement should be structured within an IT service management context, with particular attention to the design of SLAs as expectation anchors, the design of measurement instruments, and the governance of the feedback cycle connecting user satisfaction data to SLA revision. The limitations of this approach are acknowledged: the absence of primary empirical data means that the framework developed here represents a theoretical proposition to be tested rather than a finding already validated by direct observation. However, the article draws on a substantial body of empirical work cited throughout to support each theoretical claim, and the conceptual synthesis itself has direct practical value for organizations designing EDT-based #IT_governance approaches. 4. Analysis 4.1 The SLA as an Expectation Engineering Document When an organization issues an SLA, it is, whether or not it uses this language, engaging in expectation engineering. The SLA defines what good service performance will look like by specifying targets and metrics that will be used to evaluate delivery. From an EDT standpoint, this is a moment of enormous significance: the organization is choosing to anchor user satisfaction judgments to a particular set of criteria rather than to the open-ended, contextually variable standards that users would otherwise bring from their own diverse backgrounds and experiences. This expectation engineering function of the SLA has both benefits and risks. The benefit is consistency: when users share a common expectation baseline, the organization can design service delivery processes that reliably meet that baseline, and satisfaction outcomes become more predictable and manageable. The risk is that the engineered expectations may not match actual user needs or desires. Bhattacherjee's (2001) ECM research suggests that the confirmation of expectations is the primary driver of #IS_continuance satisfaction, but Deng's (2014) research demonstrates that desire disconfirmation is actually a stronger predictor of IT satisfaction than expectation disconfirmation. This means that even when SLA targets are met, users may be dissatisfied if the SLA did not capture what they actually wanted from the service. The practical implication is that SLA design must be informed by genuine user input and not solely by the technical habitus of IT professionals. Processes such as user workshops, service design thinking exercises, and continuous satisfaction monitoring should feed into the SLA revision cycle. This is consistent with the continuous service improvement logic of ITIL version 4, which emphasizes iterative service design driven by user feedback. 4.2 Continuous Measurement versus Periodic Audit A central argument of this article is that EDT should function as a continuous measurement mechanism rather than a periodic audit event. In many organizations, #user_satisfaction is measured through annual or biannual surveys, or through post-incident customer satisfaction ratings collected only after ticket closure. This episodic measurement approach captures satisfaction at specific moments in time but misses the dynamic, evolving character of the expectation-disconfirmation process. Brown, Venkatesh, and Goyal (2012) demonstrated through their longitudinal field study of over 1,100 participants that expectations and experiences interact in complex, time-varying ways. Their use of polynomial modeling showed that the relationship between expectations at time one and experiences at time two is shaped by the prior trajectory of the relationship, not just its current state. Users who had previously experienced positive disconfirmation carried different expectation structures into their next service interaction than users whose prior experiences had been confirmatory. This longitudinal complexity cannot be captured by single-point surveys. Continuous measurement, by contrast, involves collecting performance data against SLA metrics in real time, combining this with regular light-touch user experience signals such as brief transactional satisfaction queries, periodic thematic user interviews, and analysis of help desk communication patterns, and feeding this combined data stream into a governance dashboard that enables ongoing comparison between SLA-based performance metrics and user satisfaction indicators. When discrepancies between these two streams are detected, the organization can investigate whether the SLA expectations need revision, whether service delivery needs improvement, or whether the communication between IT and users about what service standards mean in practice needs strengthening. Venkatesh and Goyal's (2010) finding that both positive and negative disconfirmation can reduce behavioral intention argues strongly for this continuous approach. Organizations cannot afford to wait until negative disconfirmation becomes severe enough to generate formal complaints. The goal is to maintain expectations and performance in close alignment, which requires monitoring both dimensions simultaneously and continuously. 4.3 The Role of Perceived Usefulness and Perceived Quality Bhattacherjee's (2001) ECM model includes perceived usefulness alongside confirmation as a driver of satisfaction and continuance. Perceived usefulness captures the user's post-experience judgment about whether using the IT service actually helps them accomplish their work goals. This construct is distinct from technical performance metrics: a service may perform within SLA parameters while still being experienced as unhelpful, because the user's workflow demands differ from what the service was designed to support. Christanto et al. (2024) confirmed in a recent empirical study of IT services at an Indonesian institution that service quality perceptions, structured along dimensions including tangibles, reliability, responsiveness, assurance, and empathy, collectively shape user satisfaction in ways that are not fully captured by technical SLA compliance alone. Responsiveness and empathy dimensions were particularly significant predictors of user satisfaction, suggesting that the interpersonal and communicative dimensions of service delivery carry substantial weight in the overall EDT judgment. This finding resonates with Leonard's (2009) relational argument about SLA success: the quality of the relationship between IT providers and users, characterized by trust, empathy, and mutual understanding, is not something that can be fully captured in a metric, but it profoundly shapes the satisfaction outcome of every service interaction. An EDT-based continuous measurement system must therefore incorporate qualitative as well as quantitative signals, capturing not only whether response times were met but whether users felt heard, understood, and well served. 4.4 Expectation Inflation and the Problem of Rising Baselines One of the more subtle challenges in EDT-based IT service measurement is managing the problem of expectation inflation. When an organization consistently delivers service that meets or exceeds SLA targets, users adapt to that level of performance and revise their expectations upward. What was formerly experienced as positive disconfirmation, pleasantly exceeding expectations, becomes the new normal expectation, and future performance must match or exceed this elevated baseline to generate satisfaction. This is particularly relevant in the context of digital service management, where rapid technological change creates a constantly shifting landscape of user expectations. The growth of cloud-based collaboration platforms, instant notification systems, and real-time support tools has trained many users to expect near-immediate responses to service requests. An SLA that guaranteed four-hour response times as a gold standard in 2015 may now generate negative disconfirmation in organizations where users have access to live chat IT support tools elsewhere. World-systems theory is relevant here: core-zone organizations with the resources to deploy cutting-edge service technologies set the experiential baseline that users, through their digital consumption habits, carry into all their service encounters. When a semi-peripheral organization is unable to match these service experience standards, its users experience negative norm disconfirmation even when the organization meets all the targets formally written into its own SLA. Managing this dynamic requires organizations to monitor not only their own internal SLA compliance but the broader service experience environment in which their users are embedded. Mimetic isomorphism in ITSM, the tendency of organizations to copy the SLA structures of apparently successful peers, can become a mechanism for managing expectation inflation at the industry level, as organizations collectively update their service standards to remain consistent with the evolving experience expectations of users who move between organizations. Iden, Eikebrokk, and Marrone (2020) showed that process reference frameworks like ITIL function as institutional arrangements that facilitate service innovation by creating shared norms and co-creation practices within service ecosystems. 4.5 The Feedback Loop: From Satisfaction Data to SLA Revision The EDT framework, applied to continuous IT service measurement, implies not merely a measurement process but a governance cycle. Satisfaction data generated by the continuous monitoring approach must feed back into the SLA revision process, creating a loop in which user experience signals drive expectation recalibration, which in turn shapes service delivery priorities, which shape future user experience signals. Designing this feedback loop effectively requires addressing several organizational challenges. First, the data literacy challenge: satisfaction data must be collected and interpreted by teams who understand both its methodological limitations and its substantive meaning for service design. A single poor satisfaction score on a transactional survey may reflect a bad day for a particular user rather than a systemic service failure; conversely, consistently moderate satisfaction scores across multiple users and multiple service types may signal a structural gap between SLA expectations and genuine user needs that no individual data point makes visible. Second, the power challenge: as Bourdieu's field theory suggests, SLA revision processes take place within a field structured by differential access to capital and influence. IT professionals with high technical capital may resist SLA changes that they perceive as reducing their ability to manage service delivery efficiently, even when user satisfaction data indicates that current standards are not meeting user needs. Users with lower organizational status may find their satisfaction signals effectively discounted relative to the institutional authority of IT governance frameworks. Effective feedback loop governance must actively counteract these power dynamics by creating legitimate channels for user voice in the SLA design process. Third, the temporality challenge: expectations change over time, both as a result of the service history within a particular organization and as a result of broader changes in the service experience environment. The feedback loop must be structured with enough frequency to detect meaningful shifts in the expectation-performance gap before they generate severe dissatisfaction, but not so frequent that every transient fluctuation in satisfaction scores triggers unnecessary SLA revision. Syachbrani et al. (2025) demonstrated in their study of digital financial governance in Indonesian village governments that coercive institutional pressures significantly shape digital adoption, while normative pressures strengthen reporting consistency, a dynamic that maps directly onto the ITSM context where regulatory requirements and professional norms jointly shape the SLA revision process. The implication is that the feedback loop must navigate multiple institutional pressures simultaneously, and that organizations in different regulatory environments will need to design their EDT governance approaches accordingly. 4.6 Cross-Organizational and Cross-Cultural Dimensions A recurring thread in the analysis is that the EDT process does not operate in a cultural or institutional vacuum. The expectations users bring to IT service encounters, the standards they apply when judging whether performance has met, exceeded, or fallen short of those expectations, and the satisfaction thresholds at which they experience positive or negative disconfirmation are all culturally and institutionally situated. Wang, Zhou, and Zhang (2020), in their study of user expectations and disconfirmation in e-banking applications, found asymmetric effects in which the negative impact of negative disconfirmation on satisfaction is larger than the positive impact of positive disconfirmation, a pattern consistent with prospect theory's well-established loss aversion principle. They also found that both utility expectations and emotional expectations independently shape user satisfaction, which suggests that SLA design must attend to the emotional as well as functional dimensions of service experience. Institutional isomorphism, as mapped by Patalon and Wyczisk (2024) in the municipal digital transformation context, shows that coercive pressures from regulatory mandates, mimetic pressures from the need to emulate successful peers, and normative pressures from professional standards jointly determine the pace and direction of digital service adoption. When these institutional pressures are strong and well-aligned, organizations converge rapidly on similar SLA structures. When they are weak or contradictory, organizations maintain more diverse service standards, which makes EDT comparison across organizations more difficult but potentially more locally appropriate. Bennich (2023), studying the water sector's digital transformation, showed that organizations without competitive market pressures are driven to digitalise primarily by institutional rather than market forces, and that these institutional pressures propagate through isomorphic mechanisms that shape both what digital services organizations adopt and how they define service quality within those digital environments. The parallel to publicly funded IT service providers, university IT departments, government IT services, and healthcare IT infrastructure is direct: these organizations face strong institutional isomorphic pressures that shape their SLA structures in ways that may or may not reflect the genuine satisfaction of their users. 5. Findings 5.1 EDT as a Governance Framework for IT Service Management The central finding of this analysis is that #Expectancy_Disconfirmation_Theory is most effectively applied in IT service management not as a research instrument for measuring user satisfaction in academic studies but as a living governance framework embedded in everyday service management practice. This reframing has several practical implications. First, it means that #SLA design must be understood as expectation engineering, and must be carried out with explicit attention to the expectations it creates and the disconfirmation dynamics it is likely to generate. SLA targets that are set too high relative to service delivery capability will predictably generate negative disconfirmation and dissatisfaction. Targets that are set too low relative to user needs and industry norms will generate negative desire disconfirmation and norm disconfirmation even when formally met. Effective SLA design under EDT governance requires calibrating targets to the intersection of organizational capability, genuine user needs, and industry standard expectations. Second, the governance framework must incorporate both quantitative and qualitative measurement streams. Technical performance metrics against SLA targets capture the expectation disconfirmation dimension but do not fully capture the desire and norm disconfirmation dimensions identified by Deng (2014) as powerful drivers of IT satisfaction. Regular qualitative engagement with users, through structured interviews, focus groups, and co-design workshops, is necessary to surface the desire and norm standards against which users are privately evaluating their service experience. Third, the governance framework must include a formal feedback mechanism connecting satisfaction signals to SLA revision. The Bhattacherjee (2001) model of IS continuance is explicitly dynamic: post-experience confirmation shapes post-acceptance perceived usefulness and satisfaction, which in turn shapes continuance intention, which shapes the service interactions of the next period. An EDT governance framework that captures this dynamic must include structured processes for using satisfaction data to update service design, SLA targets, and delivery capabilities over time. 5.2 The Structural Gap Between Written SLAs and Lived User Experience A consistent finding across the literature reviewed is that written SLA targets, no matter how carefully designed, systematically underrepresent the dimensions of service quality that most strongly influence user satisfaction. The dimensions that receive the heaviest weighting in formal SLA metrics, availability, response time, and resolution time, are measurable and contractually enforceable, but they are not necessarily the dimensions that users weight most heavily in their satisfaction judgments. Christanto et al. (2024) found that responsiveness and empathy dimensions of service quality are among the strongest predictors of IT user satisfaction. Leonard (2009) found that the quality of the IT-user relationship, grounded in trust and mutual understanding, is a fundamental condition for SLA success. Wang et al. (2020) found that emotional expectations and their disconfirmation independently shape satisfaction outcomes alongside utility expectations. This gap between what SLAs measure and what users experience is not accidental. It reflects the field dynamics identified by Bourdieu: SLAs are authored by IT professionals whose habitus inclines them to measure what is technically measurable, and whose capital in the field of IT service management is constituted precisely by their command of technical metrics. The relational, emotional, and communicative dimensions of service quality that users weight heavily are not captured in these metrics not because they are unimportant but because they do not fit the measurement logic of the technical field. Closing this gap requires structural change in how SLAs are designed and governed. User co-design of SLA targets, the inclusion of qualitative satisfaction measures in SLA compliance reporting, and the formal embedding of user satisfaction data in IT governance structures are all mechanisms for addressing the structural gap between written targets and lived experience. 5.3 Institutional Pressure and the Isomorphic Trap A key finding of the theoretical analysis is what can be called the isomorphic trap in SLA design. Because normative, mimetic, and coercive isomorphic pressures drive IT organizations toward similar SLA structures, organizations may adopt service standards that are institutionally legitimate without being locally appropriate. The ITIL framework, ISO/IEC 20000, and similar standards provide templates that are widely recognized and endorsed by professional bodies, technology vendors, and regulatory authorities. Adopting these templates is a rational response to institutional pressure and confers legitimacy in the eyes of auditors, senior management, and external partners. However, as Pal and Ojha (2017) observed, the degree of isomorphism that a firm experiences under IS influence is related to the firm's position in the strategic grid: organizations for which IT is a strategic asset are more deeply embedded in the isomorphic field and more strongly pressured to conform to its standards. For these organizations, the risk of the isomorphic trap is highest: their SLA structures are most thoroughly shaped by institutional norms and least likely to be questioned or revised in response to user satisfaction signals that point in a different direction. The EDT governance framework, applied with institutional self-awareness, can function as a mechanism for detecting and escaping the isomorphic trap. When continuous EDT measurement reveals persistent gaps between SLA compliance data and user satisfaction scores, the organization has evidence that its institutionally inherited SLA structure is not aligned with its local service reality. This evidence can justify deviation from standard templates and the development of SLA structures that better reflect the organization's specific user population, service environment, and organizational culture. 5.4 Recommendations for EDT-Based Continuous Measurement Practice Synthesizing across all the preceding analysis, the following recommendations emerge for organizations wishing to implement EDT as a continuous measurement framework for IT service success. Organizations should design SLAs through user co-creation processes that capture not only functional expectations (what does good technical performance look like) but desire and norm expectations (what would ideal service feel like, and what standard do users observe in comparable services). This means going beyond the technical habitus of IT professionals and incorporating user voice as a legitimate form of capital in the SLA design field. Organizations should implement a dual measurement system that tracks both SLA compliance metrics and user satisfaction signals in real time. The two data streams should be compared regularly, with discrepancies triggering investigation and, where appropriate, SLA revision. The measurement frequency should be calibrated to the pace of change in the service environment: organizations operating in rapidly changing digital ecosystems will need more frequent calibration than those in more stable environments. Organizations should build explicit governance structures for the feedback cycle connecting EDT measurement outputs to SLA revision. This includes assigning responsibility for EDT governance, establishing protocols for how satisfaction data enters the service design process, and creating decision criteria for when and how SLA targets should be revised in response to satisfaction signals. Organizations should maintain awareness of the institutional context in which their SLA structures are embedded, attending both to the isomorphic pressures driving convergence toward industry-standard templates and to the local organizational and cultural conditions that may require deviation from those templates. World-systems awareness is particularly relevant for organizations operating in global supply chains or multi-site environments where user populations may have different expectation profiles shaped by different service experience histories. 6. Conclusion This article has argued that #Expectancy_Disconfirmation_Theory provides a rigorous and practically actionable framework for evaluating IT service success by continuously measuring end-user experience against the expectation baselines formally defined in #Service_Level_Agreements. The core contribution is the reframing of EDT as a continuous governance mechanism rather than a periodic measurement tool, embedded in the day-to-day management of IT service delivery rather than applied only at audit moments. The integration of Bourdieu's field theory reveals that SLA design is not a neutral technical exercise but a socially embedded practice shaped by the habitus and capital of IT professionals, which systematically underrepresents the dimensions of service quality that users weight most heavily. The integration of world-systems theory shows that expectation baselines are not purely organizational phenomena but are shaped by global hierarchies of technical expertise and service delivery capability that create differential disconfirmation dynamics across organizations positioned differently in the world system. The integration of institutional isomorphism theory reveals the isomorphic trap: organizations that adopt SLA templates driven by normative, coercive, and mimetic institutional pressures may find that their formally compliant service structures are persistently misaligned with local user experience, generating satisfaction gaps that no amount of technical performance improvement can close. The practical implication is that managing IT service success under EDT requires attending simultaneously to the technical dimension (is the service performing within SLA targets), the relational dimension (do users feel heard, understood, and well served), the institutional dimension (are our SLA standards appropriate to our local context or merely isomorphically inherited), and the temporal dimension (are our expectations and our service capabilities moving in alignment over time). For students reading this article, the key conceptual takeaway is this: satisfaction is never purely about performance. It is always about the relationship between performance and expectation, and expectations are never formed in a vacuum. They are shaped by professional norms, institutional pressures, global service experience environments, and the particular social field in which both the user and the IT service provider are embedded. Understanding this is the first step toward designing IT services that genuinely succeed, not just on paper, but in the lived experience of the people who depend on them. Future research should test the conceptual framework developed here through longitudinal empirical studies in diverse organizational contexts, with particular attention to the comparative EDT dynamics of organizations in different positions within global IT service hierarchies, and to the conditions under which EDT governance structures most effectively close the gap between SLA compliance and lived user satisfaction. Hashtags #Expectancy_Disconfirmation_Theory #Service_Level_Agreement #IT_Service_Management #End_User_Satisfaction #ITIL #Institutional_Isomorphism #Bourdieu_Field_Theory #World_Systems_Theory #Digital_Service_Quality #User_Experience #Expectation_Confirmation_Model #IT_Governance #Continuous_Improvement #ITSM_Framework #SLA_Compliance #IT_User_Satisfaction #Service_Quality_Measurement #IS_Continuance #EDT_IT_Services #Post_Adoption_Behavior References Ahmad, A., Arshah, R. A., Kamaludin, A., Ngah, L., Abu Bakar, T., and Zakaria, M. R. (2020). Adopting of Service Level Agreement (SLA) in enhancing the quality of IT hardware service support. Proceedings of the International Conference on Information Technology and Computing. https://www.semanticscholar.org/paper/daf765d1e711f470d8ce4c60734edf61d9ff63b6 Bennich, A. (2023). The digital imperative: Institutional pressures to digitalise. Technology and Society, 74, 102436. https://doi.org/10.1016/j.techsoc.2023.102436 Bhattacherjee, A. (2001). Understanding information systems continuance: An expectation-confirmation model. MIS Quarterly, 25(3), 351-370. https://doi.org/10.2307/3250921 Brown, S. A., Venkatesh, V., and Goyal, S. (2012). Expectation confirmation in technology use. Information Systems Research, 23(2), 474-487. https://doi.org/10.1287/isre.1110.0357 Brown, S. A., Venkatesh, V., and Goyal, S. (2014). Expectation confirmation in information systems research: A test of six competing models. MIS Quarterly, 38(3), 729-756. https://doi.org/10.25300/misq/2014/38.3.05 Christanto, H. J., Lukas, N. A., Sutresno, S. A., and Karolen, J. (2024). Evaluating user satisfaction of IT services through service quality approach. Ingenierie des Systemes d'Information, 29(2). https://doi.org/10.18280/isi.290225 Deng, L. (2014). IT disconfirmation judgments, satisfaction and trust. Proceedings of the AMCIS 2014 Conference. https://www.semanticscholar.org/paper/a1f2592c4b9dd7fba83a020ae10d4a820def121f Hyun, C., and Kim, J. H. (2024). A study on the user satisfaction with information on real estate brokerage platforms: Applying the expectancy-disconfirmation theory. Korea Real Estate Society Review, 42(1). https://doi.org/10.37407/kres.2024.42.1.5 Iden, J., Eikebrokk, T., and Marrone, M. (2020). Process reference frameworks as institutional arrangements for digital service innovation. International Journal of Information Management, 54, 102150. https://doi.org/10.1016/j.ijinfomgt.2020.102150 Ignatow, G., and Robinson, L. (2017). Pierre Bourdieu: Theorizing the digital. Information, Communication and Society, 20(7), 950-966. https://doi.org/10.1080/1369118X.2017.1301519 Leonard, A. (2009). The effect of sound relationships on SLAs. In N. Shi (Ed.), Encyclopaedia of Information Science and Technology (2nd ed., pp. 1286-1291). IGI Global. https://doi.org/10.4018/978-1-60566-026-4.CH199 Oliver, R. L. (1980). A cognitive model of the antecedents and consequences of satisfaction decisions. Journal of Marketing Research, 17(4), 460-469. Pal, A., and Ojha, A. (2017). Institutional isomorphism due to the influence of information systems and its strategic position. Proceedings of the ACM SIGMIS-CPR Conference. https://doi.org/10.1145/3084381.3084395 Paschke, A., and Schnappinger-Gerull, E. (2006). A categorization scheme for SLA metrics. Proceedings of the Workshop on Service Oriented Electronic Commerce (pp. 25-40). https://www.semanticscholar.org/paper/03218c1cb6792ca11ab2f506c0ae278dd475053e Patalon, M., and Wyczisk, A. (2024). Mapping digital transformation of municipalities through the lens of institutional isomorphism. International Journal on Social and Education Sciences, 6(2). https://doi.org/10.46328/ijonses.701 Richardson, H., and Howcroft, D. (2006). The contradictions of CRM: A critical lens on call centres. Information and Organization, 16(1), 43-68. https://doi.org/10.1016/j.infoandorg.2005.10.001 Sherlyanita, A. K. (2017). Pembuatan Service Level Agreement (SLA) pada layanan teknologi informasi berdasarkan kerangka kerja ITIL V3 2011. Jurnal Teknik ITS. https://www.semanticscholar.org/paper/8e8ef11c96bdb9400baa1805516da25a6683d26d Syachbrani, W., Idrus, M., Yusuf, Y., and Ahmad. (2025). Institutional pressures and digital financial governance in Indonesian village governments: An isomorphic perspective. Technium Social Sciences Journal, 78(1). https://doi.org/10.47577/tssj.v78i1.13365 Venkatesh, V., and Goyal, S. (2010). Expectation disconfirmation and technology adoption: Polynomial modeling and response surface analysis. MIS Quarterly, 34(2), 281-303. https://doi.org/10.2307/20721428 Wang, X., Zhou, R., and Zhang, R. (2020). The impact of expectation and disconfirmation on user experience and behavior intention. In Lecture Notes in Computer Science (Vol. 12204, pp. 227-240). Springer. https://doi.org/10.1007/978-3-030-49713-2_32