본문 바로가기
KERD
논문KCI 등재

정보보안 중요성 인식에 관한 연구: 예방동기이론 관점에서

Information Security Importance Perception: Protection Motivation Theory Perpectives

임명성
한국융합학회 (Korea Convergence Society)|2022.01|한국융합학회논문지 (Journal of the Korea Convergence Society)|제13권 제1호|pp. 283-295|DOI https://doi.org/10.15207/JKCS.2022.13.01.283

0

조회

0

다운로드

3

인용

0

참고문헌

키워드

묵인Response CostPunishment처벌Information SecurityProtection Motivation Theory정보보안예방 동기 이론대응 비용인지된 중요성AcquiescencePerceived Importance
주제분류학제간연구

초록

본 연구는 조직 구성원들의 정보보안 중요성 인식에 영향을 미치는 요인을 탐색하고자 한다. 이를 위해 예방 동기 이론을 근간으로 인지된 처벌 확신성, 인지된 대응 비용, 묵인이 인지된 정보보안 중요성 인식에 미치는 영향을 살펴보았다. 분석 결과는 다음과 같다. 첫째, 인지된 처벌 확신성은 정보보안 중요성 인식에 유의한 영향을 미치는 것으로 나타났다. 또한, 인지된 처벌 확신성은 묵인에 부정적 영향을 미치는 것으로 나타났다. 둘째, 대응 비용은 정보보안 중요성 인식에 긍정적 영향을 미치는 것으로 나타났다. 또한, 대응 비용은 묵인에 긍정적 영향을 미치는 것으로 나타났다. 마지막으로 묵인은 정보보안 인식 중요성에 부정적 영향을 미치는 것으로 나타났다. 따라서, 구성원들의 정보보안 중요성 인식을 위해서 보안 위반 행위에 확실한 처벌이 뒤따를 수 있다는 것을 인식시킬 필요가 있다. 동시에, 조직은 구성원들이 보안 행동을 수행하는 데 있어서 장해가 되는 요소들을 제거하는 시도도 해야 한다. 마지막으로, 조직의 보안에 관한 열린 소통이 가능하도록 해야 한다.

Abstract

This study attempts to explore factors that influence the perception of importance of information security. Three possible exogenous variables including perceived certainty of punishment, perceived response cost, and acquiescense are suggested that are based on the protectiom motivation theory. As a result, we found followings. First, The perceived punishment certainty has a significant effect on the perceived importance of information security. Also, it influences a negative effect on acquiescence. Second, the response cost has a negative effect on the perceived importance of information security. In addition, the response cost positively effects on acquiescence. Finally, acquiescence negatively influences on the perceived importance of information security. The results show that, in order to increase the perceived importance of information security among employees, it is necessary to make them aware that a security violation can result in certain punishment. At the same time, organizations should also attempt to remove major obstacles accompanying security behaviors of employees. Finally, organizations encourage open communication relating to information security among employees.

참고문헌 (52)

  1. René van Bavel, "Using protection motivation theory in the design of nudges to improve online security behavior", International Journal of Human-Computer Studies, 123, pp.29~39 (2019), Elsevier BV[DOI]
  2. Michael Workman, "Security lapses and the omission of information security measures: A threat control model and empirical test", Computers in Human Behavior, 24(6), pp.2799~2816 (2008), Elsevier BV[DOI]
  3. Vincent Cho, "A Study of BYOD adoption from the lens of threat and coping appraisal of its security policy", Enterprise Information Systems, 12(6), pp.659~673 (2017), Informa UK Limited[DOI]
  4. Teodor Sommestad, "A Meta-Analysis of Studies on Protection Motivation Theory and Information Security Behaviour", International Journal of Information Security and Privacy, 9(1), pp.26~46 (2015), IGI Global[DOI]
  5. Jiyoung Kim, "Hope, fear, and consumer behavioral change amid COVID‐19: Application of protection motivation theory", International Journal of Consumer Studies, 46(2), pp.558~574 (2021), Wiley[DOI]
  6. Nik Thompson, "“Security begins at home”: Determinants of home computer and mobile device security behavior", Computers & Security, 70, pp.376~391 (2017), Elsevier BV[DOI]
  7. I. M. Y. Woon, "A Protection Motivation Theory Approach to Home Wireless Security", 26th International Conference on Information Systems, pp.367~380 (2005)
  8. K. Marett, "Social Networking Websites and Posting Personal Information : An Evaluation of Protection Motivation Theory", AIS Transactions on Human-Computer Interaction, 3(3), pp.170~188 (2011)
  9. Damien Arthur, "Who's afraid of that ad? Applying segmentation to the protection motivation model", Psychology and Marketing, 21(9), pp.671~696 (2004), Wiley[DOI]
  10. Robert Crossler, "An Extended Perspective on Individual Security Behaviors", ACM SIGMIS Database: the DATABASE for Advances in Information Systems, 45(4), pp.51~71 (2014), Association for Computing Machinery (ACM)[DOI]
  11. Ronald W. Rogers, "A Protection Motivation Theory of Fear Appeals and Attitude Change1", The Journal of Psychology, 91(1), pp.93~114 (1975), Informa UK Limited[DOI]
  12. Magdalena Cismaru, "“Act on Climate Change”: An Application of Protection Motivation Theory", Social Marketing Quarterly, 17(3), pp.62~84 (2011), SAGE Publications[DOI]
  13. R. W. Rogers, "Social Psychophysiology: A Sourcebook" (1983), Guilford
  14. SARAH MILNE, "Prediction and Intervention in Health-Related Behavior: A Meta-Analytic Review of Protection Motivation Theory", Journal of Applied Social Psychology, 30(1), pp.106~143 (2000), Wiley[DOI]
  15. Kim Witte, "Putting the fear back into fear appeals: The extended parallel process model", Communication Monographs, 59(4), pp.329~349 (1992), Informa UK Limited[DOI]
  16. James E Maddux, "Protection motivation and self-efficacy: A revised theory of fear appeals and attitude change", Journal of Experimental Social Psychology, 19(5), pp.469~479 (1983), Elsevier BV[DOI]
  17. Anthony Vance, "Motivating IS security compliance: Insights from Habit and Protection Motivation Theory", Information & Management, 49(3-4), pp.190~198 (2012), Elsevier BV[DOI]
  18. Hsin-yi Sandy Tsai, "Understanding online safety behaviors: A protection motivation theory perspective", Computers & Security, 59, pp.138~150 (2016), Elsevier BV[DOI]
  19. George W. Burruss, "Modeling Individual Defiance of COVID-19 Pandemic Mitigation Strategies: Insights From the Expanded Model of Deterrence and Protection Motivation Theory", Criminal Justice and Behavior, 48(9), pp.1317~1338 (2021), SAGE Publications[DOI]
  20. Princely Ifinedo, "Understanding information systems security policy compliance: An integration of the theory of planned behavior and the protection motivation theory", Computers & Security, 31(1), pp.83~95 (2012), Elsevier BV[DOI]
  21. Waldo Rocha Flores, "Information security knowledge sharing in organizations: Investigating the effect of behavioral information security governance and national culture", Computers & Security, 43, pp.90~110 (2014), Elsevier BV[DOI]
  22. E Dincelli, "Can Privacy and Security be Friends? A Cultural Fraemwork to Differentiate Security and Privacy Behaviors on Online Social Networks", Proceedings of the 50th Hawaii International Conference on System Sciences, pp.4011~4020 (2017)
  23. Sangmi Chai, "Role of Perceived Importance of Information Security: An Exploratory Study of Middle School Children’s Information Security Behavior", InSITE Conference (2006), Informing Science Institute[DOI]
  24. D. Dang-Pham, "Investigating the Formation of Information Security Climate Perceptions with Social Network Analysis: A Research Proposal", Pacific Asia Conference on Information Systems (2015)
  25. Tejaswini Herath, "Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness", Decision Support Systems, 47(2), pp.154~165 (2009), Elsevier BV[DOI]
  26. Tejaswini Herath, "Protection motivation and deterrence: a framework for security policy compliance in organisations", European Journal of Information Systems, 18(2), pp.106~125 (2009), Informa UK Limited[DOI]
  27. 임명성, "보안정책 준수 비용과 정보보안 중요성 인식 수준에 미치는 요인에 관한 연구: 중소기업을 중심으로", 한국융합학회논문지, 9(9), pp.69~81 (2018), 한국융합학회[DOI]
  28. Scott R. Boss, "What Do Systems Users Have to Fear? Using Fear Appeals to Engender Threats and Fear that Motivate Protective Security Behaviors", MIS Quarterly, 39(4), pp.837~864 (2015), MIS Quarterly[DOI]
  29. T. Chenoweth, "Application of Protection Motivation Theory to Adoption of Protective Technologies", Proceedings of the 42nd Hawaii International Conference on System Sciences, pp.1~10 (2009)
  30. DONNA L. FLOYD, "A Meta-Analysis of Research on Protection Motivation Theory", Journal of Applied Social Psychology, 30(2), pp.407~429 (2000), Wiley[DOI]
  31. R. C. Hollinger, "Deterrence in the Workplace: Perceived Certainty, Perceived Severity, and Employee Theft", Social Forces, 62(2), pp.398~418 (1983)[DOI]
  32. Mark Warr, "Fear of victimization and sensitivity to risk", Journal of Quantitative Criminology, 3(1), pp.29~46 (1987), Springer Science and Business Media LLC[DOI]
  33. Jonathan Jackson, "Revisiting Risk Sensitivity in the Fear of Crime", Journal of Research in Crime and Delinquency, 48(4), pp.513~537 (2011), SAGE Publications[DOI]
  34. Atreyi Kankanhalli, "An integrative study of information systems security effectiveness", International Journal of Information Management, 23(2), pp.139~154 (2003), Elsevier BV[DOI]
  35. Sean Patrick Roche, "Perceived Control, Severity, Certainty, and Emotional Fear: Testing an Expanded Model of Deterrence", Journal of Research in Crime and Delinquency, 57(4), pp.493~531 (2019), SAGE Publications[DOI]
  36. JUSTIN T. PICKETT, "TOWARD A BIFURCATED THEORY OF EMOTIONAL DETERRENCE", Criminology, 56(1), pp.27~58 (2017), Wiley[DOI]
  37. Michael Knoll, "Do I Hear the Whistle…? A First Attempt to Measure Four Forms of Employee Silence and Their Correlates", Journal of Business Ethics, 113(2), pp.349~362 (2012), Springer Science and Business Media LLC[DOI]
  38. Frank Pajares, "Self-Efficacy, Motivation Constructs, and Mathematics Performance of Entering Middle School Students", Contemporary Educational Psychology, 24(2), pp.124~139 (1999), Elsevier BV[DOI]
  39. 임명성, "유통과학분야에서 탐색적 연구를 위한 요인분석", 유통과학연구, 13(9), pp.103~112 (2015), 한국유통과학회[DOI]
  40. Daniel Russo, "PLS-SEM for Software Engineering Research", ACM Computing Surveys, 54(4), pp.1~38 (2021), Association for Computing Machinery (ACM)[DOI]
  41. Sea-Jin Chang, "From the Editors: Common method variance in international business research", Journal of International Business Studies, 41(2), pp.178~184 (2010), Springer Science and Business Media LLC[DOI]
  42. Christie M. Fuller, "Common methods variance detection in business research", Journal of Business Research, 69(8), pp.3192~3198 (2016), Elsevier BV[DOI]
  43. B. Nunnally, "Psychometric Theory" (1994), Oxford Univer Press
  44. Joseph F. Hair, "When to use and how to report the results of PLS-SEM", European Business Review, 31(1), pp.2~24 (2019), Emerald[DOI]
  45. Claes Fornell, "Evaluating Structural Equation Models with Unobservable Variables and Measurement Error", Journal of Marketing Research, 18(1), pp.39~50 (1981), SAGE Publications[DOI]
  46. R. B. Kline, "Principles and Practice of Structural Equation Modeling" (2005), Guilford Press
  47. Ekin K. Pellegrini, "Construct Equivalence across Groups: An Unexplored Issue in Mentoring Research", Educational and Psychological Measurement, 65(2), pp.323~335 (2005), SAGE Publications[DOI]
  48. Matthew S. Thiese, "P value interpretations and considerations", Journal of Thoracic Disease, 8(9), pp.E928~E931 (2016), AME Publishing Company[DOI]
  49. Elena Paoletti, "Ozone exposure and stomatal sluggishness in different plant physiognomic classes", Environmental Pollution, 158(8), pp.2664~2671 (2010), Elsevier BV[DOI]
  50. Dennis D. Boos, "<i>P<", i>-Value Precision and Reproducibility, 2011, pp.65(4), 213~221[DOI]
  51. Stephan B. Bruns, "Reporting errors and biases in published empirical findings: Evidence from innovation research", Research Policy, 48(9), pp.103796~ (2019), Elsevier BV[DOI]
  52. M.J. Bayarri, "Rejection odds and rejection ratios: A proposal for statistical practice in testing hypotheses", Journal of Mathematical Psychology, 72, pp.90~103 (2016), Elsevier BV[DOI]

관련 논문AI추천

조직 구성원의 정보보안 인식에 영향을 미치는 동기 및 심리적인 요인 분석신동천, 전재찬한국엔터프라이즈아키텍처학회 · 정보화연구2018 · 제15권 제2호군 장교의 처벌에 대한 지각과 국방보안 준수 의도의 관계 : 보안 감수성의 조절효과 분석이태복국방보안연구소 · 국방과 보안2021 · 제3권 제2호조직원의 정보보안 정책 준수의도에 미치는 영향 연구: 계획된 행동이론, 공정성이론, 동기이론의 적용허성호, 황인호한국디지털정책학회 · 디지털융복합연구2018 · 제16권 제3호정보보안정책태도와 준수행동의도성, 정보보안회피성이 정보보안위반행동에 미치는 영향 분석 -조절관점과 처벌관점을 중심으로-이려화, 허성호국제군사안보연구원 · 안보군사학연구2021 · 제18권 제2호정보보안 정책 인식과 정보보안 관여성, 준수 의도성이 정보보안 행동에 미치는 영향 분석: 보상 차원과 공정성 차원을 중심으로허성호, 황인호중소기업융합학회 · 융합정보논문지2020 · 제10권 제12호정보보안 의식과 대처 효능감, 준수의향이 정보보안 행동에 미치는 영향분석: 가용성 차원과 문화 차원을 중심으로허성호, 황인호한국융합학회 · 한국융합학회논문지2021 · 제12권 제1호

이 간행물의 다른 논문 (47건)

발표상황에 대한 가상현실노출과 웹기반 인지적 개입의 통합 프로그램 효과 검증윤혜영, 박기우pp. 1-12생성 모델과 검색 모델을 이용한 한국어 멀티턴 응답 생성 연구이호동, 이종민, 임희석, 장윤나, 서재형pp. 13-21불균형 데이터를 갖는 냉동 컨테이너 고장 판별 및 원인 분석을 위한 기계학습 모형 개발이희원, 박성호, 이승현, 이승재, 이강배pp. 23-30국가R&D보고서 참고문헌 기술항목 구축 개선방안 연구현미환, 이강산다정, 이혜진pp. 31-42부가성 잡음이 존재하는 모노펄스 시스템 성능의 2변수 2차 테일러 전개 기반 분석유규태, 함형우, 이준호pp. 43-50
원문 보기