preventing behaviors —either to the benefit or detriment of the organization. Yet regulatory processes that create, maintain, and … control. We define IT-based regulation as the regulatory processes that create, combine, and embed rules within IT artifacts …-IT related practices); the source (exogenous or endogenous to the practice); and the dynamics and their impact on regulatory …