본문 바로가기
KERD
논문KCI 등재

정보보안 준수 피로 및 정책저항에 영향을 미치는 정보보안 갈등 완화에 관한 연구

A Study on the Mitigation of Information Security Conflict Affecting Information Security Compliance Fatigue and Policy Resistance

황인호
한국중소기업학회|2022.06|중소기업연구|제44권 제2호|pp. 1-27

0

조회

0

다운로드

0

인용

0

참고문헌

키워드

피로FatigueOrganization JusticeRole Conflict조직 공정성목표 공유관계 갈등업무 갈등정책저항Policy ResistanceRelation ConflictShared Goal
주제분류경영학

초록

정보 자원 관리가 조직의 핵심 가치 활동으로 인식되면서, 조직들은 엄격한 정보보안 기술, 정책 도입 등에 많은 자원을 투자하고 있다. 하지만, 내부자에 의한 정보 유출 사고는 대기업보다 중소기업에서 높은 비중을 차지하고 있어, 내부자의 정보보안 준수 행동 향상을 위한 중소기업의 보안 전략 수립이 요구된다. 본 연구는 정보보안 관련 갈등이 개인의 정보보안 준수 피로와 정보보안 정책저항을 높일 수 있음을 확인하고, 정보보안 갈등 완화를 위한 조직의 보안 환경 조건을 제시한다. 연구는 정보보안 정책을 도입한 중소기업에 근무하는 사람을 대상으로 설문을 통해 표본을 확보하였으며, 구조방정식 모형을 적용하여 연구 가설을 검증하였다. 분석 결과, 정보보안 관련 갈등 요인들이 정보보안 준수 피로를 증가시켜 정책저항으로 이어지는 것을 확인하였으며, 정보보안 목표 공유와 조직 공정성이 개인의 갈등에 의한 스트레스를 완화하는 것을 확인하였다. 본 연구는 중소기업 내부자들의 정보보안 관련 부정적 행동 원인인 스트레스의 영향을 제시함으로써, 내부의 정보보안 목표 달성을 위한 전략 수립 방안을 제시한 관점에서 시사점을 가진다.

Abstract

As information resource management is recognized as an organization's core value activity, organizations are investing a lot of resources in implementing strict information security(IS) technologies and policies. However, IS incidents caused by insiders occupy a higher proportion in SMEs than in large enterprises, so it is required to establish IS strategies for SMEs to improve IS compliance behaviors of insiders. We confirm that IS related conflicts can increase individual IS compliance fatigue and IS policy resistance, and suggest security environmental conditions of the organization to mitigate individual IS conflicts. We obtained a sample through a questionnaire targeting workers of SMEs who have introduced IS policies, and verified the research hypothesis by applying structural equation modeling. As a result of the analysis, we confirmed that IS related conflict factors formed policy resistance by reducing IS compliance fatigue, and confirmed that IS shared goal and organization justice mitigated individual conflict. Our study provides a strategy for achieving internal IS goals by suggesting the causes and solutions of IS resistance among SME insiders.

참고문헌 (57)

  1. "중소기업의 가장 큰 보안 고민은 '랜섬웨어'와 '정보 유출" (2020), 권정수[URL]
  2. 백민정, "중소규모 조직구성원의 정보보안인식과 행동이 정보보안성과에 미치는 영향에 관한 연구", 중소기업연구, 33(2), pp.113~132 (2011), 한국중소기업학회
  3. 서영복, "기업 간 거래에서 거래공정성과 거래진정성 지각이 평판, 신뢰, 거래비용감소에 미치는 영향", 중소기업연구, 42(3), pp.145~172 (2020), 한국중소기업학회[DOI]
  4. 안상수, "중소기업의 기술 및 영업비밀 보호에 대한 보안규정의 법적 근거 강화방안", 중소기업연구, 42(1), pp.57~77 (2020), 한국중소기업학회[DOI]
  5. 황인호, "조직공정성과 조직 신뢰가 정보보안 기술 스트레스 완화에 미치는 영향 연구", 한국산학기술학회논문지, 22(7), pp.435~448 (2021), 한국산학기술학회[DOI]
  6. Adams, J. S., "Advances in experimental social psychology Vol. 2", pp.267~299 (1965), Academic Press
  7. AlGhamdi, S., "Information security governance challenges and critical success factors: Systematic review", Computers & Security, 99, pp.102030~ (2020)
  8. Ambrose, M. L., "The role of overall justice judgments in organizational justice research : A test of mediation", Journal of Applied Psychology, 94(2), pp.491~500 (2009)
  9. Ayyagari, R., "Technostress : Technological antecedents and implications", MIS Quarterly, 35(4), pp.831~858 (2011)
  10. Bao, Y., "Organizational resistance to performance-enhancing technological innovations : A motivation-threat-ability framework", Journal of Business &Industrial Marketing, 24(2), pp.119~130 (2009)
  11. Chen, P., "The relationship between person-organization fit and job satisfaction", Journal of Managerial Psychology, 31(5), pp.946~959 (2016)
  12. Chow, W. S., "Social network, social trust and shared goals in organizational knowledge sharing", Information & Management, 45(7), pp.458~465 (2008)
  13. Colquitt, J. A., "On the dimensionality of organizational justice : A construct validation of a measure", Journal of Applied Psychology, 86(3), pp.386~400 (2001)
  14. D’Arcy, J., "Predicting employee information security policy compliance on a daily basis : The interplay of security-related stress, emotions, and neutralization", Information & Management, 56(7), pp.103151~ (2019)
  15. D'Arcy, J., "Understanding employee responses to stressful information security requirements : A coping perspective", Journal of Management Information Systems, 31(2), pp.285~318 (2014)
  16. Fornell, C., "Evaluating structural equation models with unobservable variables and measurement error", Journal of Marketing Research, 18(1), pp.39~50 (1981)
  17. Galluch, P. S., "Interrupting the workplace : Examining stressors in an information technology context", Journal of the Association for Information Systems, 16(1), pp.1~47 (2015)
  18. Hong, S., "Testing configural, metric, scalar, and latent mean invariance across genders in sociotropy and autonomy using a non-Western sample", Educational and Psychological Measurement, 63(4), pp.636~654 (2003)
  19. Howard, L. W., "Flight from unfairness : Effects of perceived injustice on emotional exhaustion and employee withdrawal", Journal of Business and Psychology, 25(3), pp.409~428 (2010)
  20. Hoyle, R. H., "Sample size, reliability, and tests of statistical mediation", Statistical Strategies for Small Sample Research, 1, pp.195~222 (1999)
  21. Hwang, I., "Why not comply with information security? An empirical approach for the causes of non-compliance", Online Information Review, 41(1), pp.2~18 (2017)
  22. Hwang, I., "Examining technostress creators and role stress as potential threats to employees' information security compliance", Computers in Human Behavior, 81, pp.282~293 (2018)
  23. Hwang, I., "Impact of regulatory focus on security technostress and organizational outcomes:the moderating effect of security technostress inhibitors" (2021), Information Technology & People
  24. Jehn, K. A., "A multimethod examination of the benefits and detriments of intragroup conflict", Administrative Science Quarterly, 40(2), pp.256~282 (1995)
  25. Judge, T. A., "Organizational justice and stress : The mediating role of work-family conflict", Journal of Applied Psychology, 89(3), pp.395~404 (2004)
  26. Lee, A. R., "Information and communication technology overload and social networking service fatigue: A stress perspective", Computers in Human Behavior, 55, pp.51~61 (2016)
  27. Lee, W. J., "Sustainable information security behavior management:An empirical approach for the causes of employees’ voice behavior", Sustainability, 13(11), pp.6077~ (2021)
  28. Leung, M. Y., "Structural linear relationships between job stress, burnout, physiological stress, and performance of construction project managers", Engineering, Construction and Architectural Management, 18(3), pp.312~328 (2011)
  29. Losada-Otálora, M., "Interpersonal conflict at work and knowledge hiding in service organizations:The mediator role of employee well-being", International Journal of Quality and Service Sciences, 13(1), pp.63~90 (2020)
  30. Lowry, P. B., "Leveraging fairness and reactance theories to deter reactive computer abuse following enhanced organisational information security policies: An empirical study of the influence of counterfactual reasoning and organisational trust", Information Systems Journal, 25(3), pp.193~273 (2015)
  31. Ma, X., "IS professionals’ information security behaviors in Chinese IT organizations for information security protection", Information Processing &Management, 59(1), pp.102744~ (2022)
  32. Menard, P., "User motivations in protecting information security : Protection motivation theory versus self-determination theory", Journal of Management Information Systems, 34(4), pp.1203~1230 (2017)
  33. Merhi, M. I., "Examining the impact of deterrence factors and norms on resistance to information systems security", Computers in Human Behavior, 92, pp.37~46 (2019)
  34. Moody, G. D., "Toward a unified model of information security policy compliance", MIS Quarterly, 42(1), pp.258~311 (2018)
  35. Mulki, J. P., "Effect of ethical climate on turnover intention : Linking attitudinal-and stress theory", Journal of Business Ethics, 78(4), pp.559~574 (2008)
  36. Nadeem, M. A., "Impact of shared goals on knowledge hiding behavior : The moderating role of trust", Management Decision, 59(6), pp.1312~1332 (2020)
  37. Nasirpouri Shadbad, F., "Understanding employee information security policy compliance from role theory perspective", Journal of Computer Information Systems, 61(6), pp.571~580 (2021)
  38. Nunnally, J. C., "Psychometric theory" (1978), McGraw-Hill
  39. Oreg, S., "Personality, context, and resistance to organizational change", European Journal of Work and Organizational Psychology, 15(1), pp.73~101 (2006)
  40. Parker, P. D., "Teachers’ workplace well-being : Exploring a process model of goal orientation, coping behavior, engagement, and burnout", Teaching and Teacher Education, 28(4), pp.503~513 (2012)
  41. Peng, H., "How and when intragroup relationship conflict leads to knowledge hiding: The roles of envy and trait competitiveness", International Journal of Conflict Management, 32(3), pp.383~406 (2020)
  42. Pham, H. C., "Information security burnout : Identification of sources and mitigating factors from security demands and resources", Journal of Information Security and Applications, 46, pp.96~107 (2019)
  43. Podsakoff, P. M., "Common method biases in behavioral research : A critical review of the literature and recommended remedies", Journal of Applied Psychology, 88(5), pp.879~903 (2003)
  44. Ragu-Nathan, T. S., "The consequences of technostress for end users in organizations : Conceptual development and empirical validation", Information Systems Research, 19(4), pp.417~433 (2008)
  45. "Global cyber security market (2021 to 2030) - by component, deployment type, user type, industry vertical and region" (2021)[URL]
  46. Salanova, M., "The dark side of technologies : Technostress among users of information and communication technologies", International Journal of Psychology, 48(3), pp.422~436 (2013)
  47. Sarkar, S., "The influence of professional subculture on information security policy violations : A field study in a healthcare context", Information Systems Research, 31(4), pp.1240~1259 (2020)
  48. Semerci, A. B., "Examination of knowledge hiding with conflict, competition and personal values", International Journal of Conflict Management, 30(1), pp.111~131 (2019)
  49. Trang, S., "Examining the role of stress and information security policy design in information security compliance behaviour : An experimental study of in-task behaviour", Computers &Security, 104, pp.102222~ (2021)
  50. Tziner, A., "Organizational citizenship behavior, organizational justice, job stress, and workfamily conflict : Examination of their interrelationships with respondents from a non-Western culture", Revista de Psicología del Trabajo y de las Organizaciones, 30(1), pp.35~42 (2014)
  51. Tziner, A., "Work stress and turnover intentions among hospital physicians : The mediating role of burnout and work satisfaction", Revista de Psicología del Trabajo y de las Organizaciones, 31(3), pp.207~213 (2015)
  52. Data breach investigations report, "Verizon", ~ (2021)
  53. Willem, A., "Social capital and political bias in knowledge sharing : An exploratory study", Human Relations, 59(10), pp.1343~1370 (2006)
  54. Wixom, B. H., "An empirical investigation of the factors affecting data warehousing success", MIS Quarterly, 25(1), pp.17~41 (2001)
  55. Xu, J., "The moderating effect of abusive supervision on information security policy compliance : Evidence from the hospitality industry", Computers & Security, 111, pp.102455~ (2021)
  56. Zhang, Y., "It's not fair… or is it? The role of justice and leadership in explaining work stressor–job performance relationships", Academy of Management Journal, 57(3), pp.675~697 (2014)
  57. Zineldin, M., "An examination of the main factors affecting trust", commitment in supplier-dealer relationships : An empirical study of the Swedish wood industry, 2000, pp.12(4), 245~266

관련 논문AI추천

정보보안 관련 업무 스트레스 완화에 대한 연구황인호중소기업융합학회 · 융합정보논문지2020 · 제10권 제9호조직구성원의 정보보안 준수 및 미준수 원인에 대한 연구허성호, 황인호한국융합학회 · 한국융합학회논문지2020 · 제11권 제9호정보보안 조직 공정성과 긍정심리자본이 업무 스트레스 완화에 미치는 영향 연구이윤석, 황인호한국정보보호학회 · 정보보호학회논문지2022 · 제32권 제3호조직공정성이 보안관련 업무스트레스 및 부정적 행동에 미치는 영향안상준, 황인호한국컴퓨터정보학회 · 한국컴퓨터정보학회논문지2019 · 제24권 제11호정보보안 종사자의 조직갈등과 직무이탈 의도에 관한 연구김근혜, 박규동, 심미나한국정보보호학회 · 정보보호학회논문지2019 · 제29권 제2호정보보안 관련 스트레스와 개인조직 적합성이 정보보안 지식공유행동에 미치는 영향황인호한국융합학회 · 한국융합학회논문지2021 · 제12권 제2호

이 간행물의 다른 논문 (3건)

중소기업 임직원의 긍정심리자본이 이직의도에 미치는 영향과 조직시민행동의 매개효과최성용pp. 29-48온라인 마켓플레이스에서 구매자 관여의 역할: 경험재와 탐색재의 비교연구정승화, 이승용, 박선주pp. 49-73COVID-19 확산 우려에 대한 자영업자의 차별적 영향요인 연구윤상용, 차남수, 이종욱pp. 75-93
원문 보기