디지털 전환(DX) 시대에 기업의 정보보안 투자 수준에 따른 운영성과에 관한 연구
A Study on the Operational Performance by the Investment Level of Companies Information Security in the Digital Transformation(DX) Era
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
The purpose of this study is to examine the operational performances by the investment level of information security in companies. The theoretical background summarized the meaning of information security, management information security, and network security. The research process was carried out in four stages. As a result of the analysis, the level of information security was classified into four groups, and the difference in operational performance was confirmed. According to the categorical regression analysis of the three dependent variables, independent variables such as network threats, non-network threats, executive information security awareness, industry, organizational size, and information security education all affected information security regulations, in-house information security checks, and information security budget investments. The theoretical implications of this study have contributed to updating the latest information security theory. Practical implications are that rational investments should be made on the level of information security of companies.
Abstract
The purpose of this study is to examine the operational performances by the investment level of information security in companies. The theoretical background summarized the meaning of information security, management information security, and network security. The research process was carried out in four stages. As a result of the analysis, the level of information security was classified into four groups, and the difference in operational performance was confirmed. According to the categorical regression analysis of the three dependent variables, independent variables such as network threats, non-network threats, executive information security awareness, industry, organizational size, and information security education all affected information security regulations, in-house information security checks, and information security budget investments. The theoretical implications of this study have contributed to updating the latest information security theory. Practical implications are that rational investments should be made on the level of information security of companies.
참고문헌 (26)
- 디지털 전환 시대의 과학기술혁신정책 : 산업 고도화와 융복합 신산업 창출을 위한 10대 정책과제, "한국과학기술기획평가원", ~ (2022)
- 정병호, "인공지능 기술 위험관리에 따른 과학기술 정책과 활용 불안감", e-비즈니스연구, 21(3), pp.91~104 (2020)
- 박새한, "의료 빅데이터로 분석한 만성질환자의 건강정보 수준별 차이 연구", 디지털산업정보학회 논문지, 19(4), pp.73~86 (2023)
- 정병호, "기밀정보 유출 경험을 가진 기업들의 정보사고 대응역량 강화에 관한 연구", 디지털산업정보학회 논문지, 12(2), pp.73~86 (2016)
- "협력사 뚫리면 속수무책...대기업 정보보안 비상" (2024), 한국경제[URL]
- "방사청, “KF-21 기밀 유출 시도에 엄중하게 주시… 합동조사 중,”" (2024)[URL]
- "LG엔솔 비밀 누출한 前직원 구속…'자문'에 '가명'까지 수단방법 안 가려" (2023), 디지털데일리[URL]
- "군 기밀 문서 누출 HD현중 직원, 항소심서 일부 무죄 유죄 판결" (2023)[URL]
- NIST, "Information Security Handbook: A Guide for Managers" (2006)
- Bulgurcu, B., "Information Security Policy Compliance : An Empirical Study of Rationality-based Beliefs and Information Security Awareness", MIS Quarterly, 34(3), pp.523~548 (2010)
- Mamonov, S., "The Impact of Information Security Threat Awareness on Privacy-Protective Behaviors", Computers in Human Behavior, 83, pp.32~44 (2018)
- Solms, B., "Information security management : The second generation", Computer and Security, 15(4), pp.281~288 (1996)
- Hone, K., "Information Security Policy : What do International Information Security Standards Say?", Computers and Security, 21(5), pp.402~409 (2002)
- Hsu, Jack Shih-Chieh, "The Role of Extra-Role Behaviors and Social Controls in Information Security Policy Effectiveness", Information Systems Research, 26(2), pp.282~300 (2015)
- NIST, "Risk management guide for information technology systems", ist Special Publication, ~ (2002)
- Vance, A., "Motivating IS Security compliance : Insights from Habit and Protection Motivation Theory", Information & Management, 49, pp.190~198 (2012)
- McIlwraith, A., "Information security and employee behaviour: how to reduce risk through employee education, training and awareness" (2021), Routledge
- Hwang, I., "Why Not Comply with Information Security? An Empirical Approach for the Causes of Non-compliance", Online Information Review, 41(1), pp.2~18 (2017)
- 김봉현, "네트워크 보안 기술 동향과 전망", 한국통신학회지(정보와 통신), 31(4), pp.99~106 (2014)
- 김시흥, "IP 통합 관리를 통한 유·무선 네트워크의 생존성 향상에 관한 연구", 정보보증논문지, 3(3), pp.43~50 (2003)
- Yeh, Quey-Jen, "Threats and countermeasures for information system security : A cross-industry study", Information & Management, 44(5), pp.480~491 (2007)
- 이대식, "유비쿼터스 컴퓨팅 및 네트워크의 보안연구", 정보보증논문지, 5(4), pp.59~65 (2005)
- Vacca, John R., "Computer and information security handbook" (2012), Newnes
- "2022년 정보보호 실태조사(기업)", 과학기술정보통신부[URL]
- Hair, Joseph F., "Multivariate data analysis" (2010)
- 정병호, "산업별 정보보안의 투자 수준과 관리 역량에 관한 연구", 디지털산업정보학회 논문지, 19(2), pp.89~102 (2023)