정보보안 정책 인식과 정보보안 관여성, 준수 의도성이 정보보안 행동에 미치는 영향 분석: 보상 차원과 공정성 차원을 중심으로
Analysis of the Effects of Information Security Policy Awareness, Information Security Involvement, and Compliance Behavioral Intention on Information Security behavior : Focursing on Reward and Fairness
1
조회
0
다운로드
7
인용
0
참고문헌
키워드
초록
본 연구의 목적은 정보보안 정책 인식, 정보보안 관여성, 준수 의도성이 정보보안 행동에 미치는 영향력을 분석하는 것이다. 연구 방법은 보상 차원과 공정성 차원의 교차설계로 구성되었고, 조직적인 차원의 정책이 개인의 의사결정 수준에서 발생하는 정보처리 단계를 통해 정보보안 준수의도로 나타나는 과정에 주안점을 두었다. 연구 결과, 보상 차원은 준수 의도성에 유의미한 영향을 미치고 있었으며, 심리적 조건의 영향력이 물질적 조건보다 더 큰 것으로 나타났다. 공정성 차원은 정보보안 정책 인식, 정보보안 관여성, 정보보안 행동에 유의미한 영향을 미치고 있었으며, 형평성 조건의 영향력이 동등성 조건보다 더 큰 것으로 나타났다. 결과적으로 도출한 결과 모형은 측정변인으로 재구성된 복합 매개모형으로 확인되었고, 개인과 조직의 문화적 환경에 의한 시너지 관점에서 필요한 연구 방향을 논의하였다.
Abstract
The aim of this study to assess the effect of information security policy awareness, information security involvement, compliance behavioral intention on information security behavior The research method is composed of a cross-sectional design of reward and fairness. This paper focuses on the process of organizational policy on the information security compliance intention in the individual decision-making process. As a result, the reward had a significant effect on compliance behavioral intention, and it was found that influence of the psychological reward-based condition was greater than the material reward-based condition. The fairness had a significant effect on information security policy awareness, information security involvement, information security behavior, and it was found that influence of the equity-based condition was greater than the equality-based condition. The exploration model was verified as a multiple mediation model. In addition, the discussion presented the necessary research direction from the perspective of synergy by the cultural environment of individuals and organizations.
참고문헌 (25)
- Bilal Khan, "Effectiveness of information security awareness methods based on psychological theories", AFRICAN JOURNAL OF BUSINESS MANAGEMENT, 5(26), pp.10862~10868 (2011), Academic Journals[DOI]
- 이려화, "인간의 요소에 초점을 맞춘 정보 보안 전략 탐색", 교양학 연구, (6), pp.103~124 (2017), 다빈치미래교양연구소[DOI]
- John D’Arcy, "Predicting employee information security policy compliance on a daily basis: The interplay of security-related stress, emotions, and neutralization", Information & Management, 56(7), pp.103151~ (2019), Elsevier BV[DOI]
- Inho Hwang, "Security Awareness: The First Step in Information Security Compliance Behavior", Journal of Computer Information Systems, 61(4), pp.345~356 (2019), Informa UK Limited[DOI]
- 이항, "정보보안 종사자의 감정노동과 업무성과 간의 구조적 관계에 대한 융합연구", 한국융합학회논문지, 9(1), pp.67~74 (2018), 한국융합학회[DOI]
- 2020 data breach investigations report, "Verizon", ~ (2020)
- "Cyber security market size, share & trends analysis report by component, by security type, by solution, by service, by deployment, by organization, by application, and segment Forecasts, 2019 – 2025" (2019)[URL]
- L. Tredinnick, "Digital information culture:the individual and society in the digital age" (2008), Elsevier
- Mohammad I. Merhi, "Examining the impact of deterrence factors and norms on resistance to Information Systems Security", Computers in Human Behavior, 92, pp.37~46 (2019), Elsevier BV[DOI]
- P. Van Schaik, "Risk as affect: The affect heuristic in cybersecurity", Computers & Security, 90, pp.101651~ (2020)
- Salvatore Aurigemma, "Deterrence and punishment experience impacts on ISP compliance attitudes", Information & Computer Security, 25(4), pp.421~436 (2017), Emerald[DOI]
- 조진현, "정보보호인력의 직무스트레스와 직무만족이 이직의도에 미치는 영향분석: 조직공정성의 조절효과", 한국전자거래학회지, 24(3), pp.143~161 (2019), 한국전자거래학회[DOI]
- A. P. Getman, "Information security in modern society: Sociocultural aspects", Amazonia Investiga, 9(25), pp.6~14 (2020)
- J. G. Paolillo, "An empirical investigation of the influence of selected personal, organizational and moral intensity factors on ethical decision making", Journal of Business Ethics, 35(1), pp.65~74 (2002)
- Melvin L. Foulds, "Changes in Locus of Internal-External Control", Comparative Group Studies, 2(3), pp.293~300 (1971), SAGE Publications[DOI]
- Judy Cameron, "Reinforcement, Reward, and Intrinsic Motivation: A Meta-Analysis", Review of Educational Research, 64(3), pp.363~423 (1994), American Educational Research Association (AERA)[DOI]
- E. A. Mannix, "Equity, equality, or need? The effects of organizational culture on the allocation of benefits and burdens", Organizational Behavior and Human Decision Processes, 63(3), pp.276~286 (1995)
- Mikko Siponen, "Compliance with Information Security Policies: An Empirical Investigation", Computer, 43(2), pp.64~71 (2010), Institute of Electrical and Electronics Engineers (IEEE)[DOI]
- Princely Ifinedo, "Information systems security policy compliance: An empirical study of the effects of socialisation, influence, and cognition", Information & Management, 51(1), pp.69~79 (2014), Elsevier BV[DOI]
- Eirik Albrechtsen, "A qualitative study of users' view on information security", Computers & Security, 26(4), pp.276~289 (2007), Elsevier BV[DOI]
- The psychology of security for the home computer user, "A. E. Howe", IEEE, ~ (2012)
- B. Bulgurcu, "Information security policy compliance: an empirical study of rationality-based beliefs and information security awareness", MIS quarterly, 34(3), pp.523~548 (2010)
- 허성호, "군 조직의 안전문화가 안전행동에 미치는 영향 분석: 안전리더십의 매개효과를 중심으로", 선진국방연구, 3(2), pp.63~81 (2020), 방위사업연구소[DOI]
- 허성호, "구인기업과 구직자 간의 채용경향성 비교 연구: 채용프로세스를 중심으로", 디지털융복합연구, 18(7), pp.85~92 (2020), 한국디지털정책학회[DOI]
- Nader Sohrabi Safa, "Motivation and opportunity based model to reduce information security insider threats in organisations", Journal of Information Security and Applications, 40, pp.247~257 (2018), Elsevier BV[DOI]