본문 바로가기
KERD
논문KCI 등재

종업원의 BYOD 보안 정책 준수 의도에 영향을 미치는 사회인지적 요인에 관한 연구

A Study on the Effect of Social Cognitive Factors on Employees’Intention to Comply with BYOD Security Policy

1

조회

0

다운로드

0

인용

0

참고문헌

키워드

주제분류학제간연구

초록

Purpose: This study focuses on examining the social cognitive factors that influence employees' intentions to comply with security policies in a Bring Your Own Device (BYOD) environment, based on a model derived from Social Cognitive Theory. Additionally, it aims to propose managerial strategies to improve employees' adherence to BYOD security policies. Methods: To investigate employees' intentions to comply with BYOD security policies, we performed hypotheses testing within the proposed research model. A Partial Least Squares Structural Equation Modeling (PLS-SEM) analysis was employed to examine the collected data. The data was gathered from 268 employees working at companies that have adopted BYOD, through an online survey conducted between June 10 and 17, 2024. Results: The results confirmed all of our proposed hypotheses. Encouragement by others, the information security practices by others and instrumental support significantly influence both outcome expectations and self-efficacy. Additionally, instrumental support, outcome expectations, and self-efficacy are shown to affect employees' intentions to comply with BYOD security policies. Conclusion: Our study revealed that companies implementing BYOD should actively encourage employees to minimize security policy breaches by utilizing various support programs and sharing success stories of high performance resulting from adherence to the policies. This approach can effectively increase employees' intention to comply with BYOD information security policies.

Abstract

Purpose: This study focuses on examining the social cognitive factors that influence employees' intentions to comply with security policies in a Bring Your Own Device (BYOD) environment, based on a model derived from Social Cognitive Theory. Additionally, it aims to propose managerial strategies to improve employees' adherence to BYOD security policies. Methods: To investigate employees' intentions to comply with BYOD security policies, we performed hypotheses testing within the proposed research model. A Partial Least Squares Structural Equation Modeling (PLS-SEM) analysis was employed to examine the collected data. The data was gathered from 268 employees working at companies that have adopted BYOD, through an online survey conducted between June 10 and 17, 2024. Results: The results confirmed all of our proposed hypotheses. Encouragement by others, the information security practices by others and instrumental support significantly influence both outcome expectations and self-efficacy. Additionally, instrumental support, outcome expectations, and self-efficacy are shown to affect employees' intentions to comply with BYOD security policies. Conclusion: Our study revealed that companies implementing BYOD should actively encourage employees to minimize security policy breaches by utilizing various support programs and sharing success stories of high performance resulting from adherence to the policies. This approach can effectively increase employees' intention to comply with BYOD information security policies.

참고문헌 (53)

  1. Abiodun, T., "Driving industrial digital transformation", Journal of Computer Information Systems, 63(6), pp.1345~1361 (2023)
  2. Ajzen, I., "Attitudes, personality and behaviour" (2005), McGraw-hill education (UK)
  3. Al-Dokhny, A., "Students’ intentions to use distance education platforms : An investigation into expanding the technology acceptance model through social cognitive theory", Electronics, 10(23), pp.2992~ (2021)
  4. Alvarez-Risco, A., "Social Cognitive Theory to Assess the Intention to participate in the Facebook Metaverse by citizens in Peru during the COVID-19 pandemic", Journal of Open Innovation: Technology, Market, and Complexity, 8(3), pp.142~ (2022)
  5. Bandura, A, "Social foundations of thought and action", pp.23~28 (1986)
  6. Boateng, H., "Assessing the determinants of internet banking adoption intentions : A social cognitive theory perspective", Computers in Human Behavior, 65, pp.468~478 (2016)
  7. Borah, P., "Social cognitive theory and willingness to perform recommended health behavior : the moderating role of misperceptions", Journal of Health Communication, 29(1), pp.49~60 (2024)
  8. Bullock, L., "The future of byod: Statistics, predictions and best practices to prep for the future" (2019), Forbes
  9. Caballero, A., "Computer and information security handbook", pp.497~505 (2017), Morgan Kaufmann
  10. Chao, C. M, "Factors determining the behavioral intention to use mobile learning : An application and extension of the UTAUT model", Frontiers in psychology, 10, pp.1652~ (2019)
  11. Cho, V., "A study of BYOD adoption from the lens of threat and coping appraisal of its security policy", Enterprise Information Systems, 12(6), pp.659~673 (2018)
  12. Cohen, J, "Statistical power analysis for the behavioral sciences" (2013), routledge
  13. Compeau, D. R., "Computer self-efficacy: Development of a measure and initial test", MIS quarterly, pp.189~211 (1995)
  14. Compeau, D., "Social cognitive theory and individual reactions to computing technology:A longitudinal study", MIS quarterly, pp.145~158 (1999)
  15. Crossler, R. E., "Understanding compliance with bring your own device policies utilizing protection motivation theory : Bridging the intention-behavior gap", Journal of Information Systems, 28(1), pp.209~226 (2014)
  16. Doménech-Betoret, F., "Self-efficacy, satisfaction, and academic achievement : the mediator role of Students' expectancy-value beliefs", Frontiers in psychology, 8, pp.1193~ (2017)
  17. Eslahi, M., "BYOD: Current state and security challenges", 2014 IEEE Symposium on Computer Applications and Industrial Electronics (ISCAIE), pp.189~192 (2014), IEEE
  18. Fornell, C., "Evaluating structural equation models with unobservable variables and measurement error", Journal of marketing research, 18(1), pp.39~50 (1981)
  19. Galvez, S. M., "Identifying factors that influence corporate information security behavior", AMCIS 2009 Proceedings, pp.765~ (2009)
  20. Galvez, S. M., "Factors affecting individual information security practices", Proceedings of the 2015 ACM SIGMIS Conference on Computers and People Research, pp.135~144 (2015)
  21. Hair, J. F., "When to use and how to report the results of PLS-SEM", European business review, 31(1), pp.2~24 (2019)
  22. Hair, J., "An updated and expanded assessment of PLS-SEM in information systems research", Industrial management & data systems, 117(3), pp.442~458 (2017)
  23. Hameed, M. A., "The role of self-efficacy on the adoption of information systems security innovations : a meta-analysis assessment", Personal and Ubiquitous Computing, 25(5), pp.911~925 (2021)
  24. Herath, T., "Protection motivation and deterrence : a framework for security policy compliance in organisations", European Journal of information systems, 18(2), pp.106~125 (2009)
  25. Hovav, A., "This is my device! Why should I follow your rules? Employees’ compliance with BYOD security policy", Pervasive and Mobile Computing, 32, pp.35~49 (2016)
  26. Hsu, H. Y., "Exploring the relationship between student-perceived faculty encouragement, self-efficacy, and intent to persist in engineering programs", European Journal of Engineering Education, 46(5), pp.718~734 (2021)
  27. Hwang, I., "Why not comply with information security? An empirical approach for the causes of non-compliance", Online Information Review, 41(1), pp.2~18 (2017)
  28. Ifinedo, P, "Information systems security policy compliance : An empirical study of the effects of socialisation, influence, and cognition", Information & Management, 51(1), pp.69~79 (2014)
  29. Jarrahi, M. H., "A pragmatic approach to managing enterprise IT infrastructures in the era of consumerization and individualization of IT", International Journal of Information Management, 37(6), pp.566~575 (2017)
  30. Keyvani, A., "Encouragement, punishment, offering new solutions", International Journal of Management Perspectives, 1(4), pp.74~85 (2009)
  31. Kwon, D, H, "A Study on the Mediating Effect of Self-Efficacy in the Relationship between Self-leadership and Customer Orientation : Focusing on Airline Cabin Crew", Journal of Korean Society for Quality Management, 50(3), pp.441~457 (2022)
  32. Kwon, T., "The effect of observational learning on self-efficacy by sport competition condition, performance level of team members, and whether you win or lose", International Journal of Environmental Research and Public Health, 19(16), pp.10148~ (2022)
  33. Lee Je Hyeon, "A Study on Change Issues and Overcoming Measures in the Adoption of Smart Work-Focusing on Leadership, Communication, Organizational Culture, and Human Resource Management Aspects", The e-Business Studies, 22(1), pp.107~121 (2021)
  34. Lee Jr, J., "Implications of monitoring mechanisms on bring your own device adoption", Journal of Computer Information Systems, 57(4), pp.309~318 (2017)
  35. Lee, S, "Examining User Perception about Airline Untact Service Quality", Journal of Korean Society for Quality Management, 50(3), pp.545~570 (2022)
  36. Lin, H. C., "What motivates health information exchange in social media? The roles of the social cognitive theory and perceived interactivity", Information & Management, 55(6), pp.771~780 (2018)
  37. Liu, J., "Applying social cognitive theory in predicting physical activity among Chinese adolescents : a cross-sectional study with multigroup structural equation model", Frontiers in psychology, 12, pp.695241~ (2022)
  38. Ng, B. Y., "Studying users' computer security behavior : A health belief perspective", Decision Support Systems, 46(4), pp.815~825 (2009)
  39. Pahnila, S., "Employees' behavior towards IS security policy compliance", 200740th Annual Hawaii International Conference on System Sciences, pp.156~ (2007)
  40. Pákozdy, C., "The imposter phenomenon and its relationship with self-efficacy, perfectionism and happiness in university students", Current Psychology, 43(6), pp.5153~5162 (2024)
  41. Palanisamy, R., "BYOD policy compliance : Risks and strategies in organizations", Journal of Computer Information Systems, 62(1), pp.61~72 (2022)
  42. Palanisamy, R., "Employees’ BYOD security policy compliance in the public sector", Journal of Computer Information Systems, 64(1), pp.62~77 (2024)
  43. Sixth annual benchmark study on privacy & security of healthcare data, "Ponemon, I", ~ (2016)
  44. Puhakainen, P., "Improving employees' compliance through information systems security training : an action research study", MIS quarterly, pp.757~778 (2010)
  45. Seneviratne, P, "The Market Orientation and User Generated Content for Knowledge Sharing" (2023)
  46. Seo Jay, "A Study on Factors Affecting Intention to Use Online Collaboration Tools for the Non-Face-to-Face Educational Environment", Journal of Korean Society for Quality Management, 50(3), pp.571~591 (2022)
  47. Singh, N, "BYOD genie is out of the bottle"Devil or angel"", Journal of Business Management & Social Sciences Research, 1(3), pp.1~12 (2012)
  48. Siponen, M., "Employees’ adherence to information security policies : An exploratory field study", Information & management, 51(2), pp.217~224 (2014)
  49. Siponen, M., "Factors influencing protection motivation and IS security policy compliance", 2006 Innovations in Information Technology, pp.1~5 (2006), IEEE
  50. Tai, W. T., "Effects of training framing, general self-efficacy and training motivation on trainees' training effectiveness", Personnel review, 35(1), pp.51~65 (2006)
  51. Timms, K, "BYOD must be met with a wider appreciation of the cyber-security threat", Computer Fraud &Security, 7, pp.5~8 (2017)
  52. "How to create a Bring Your Own Device (BYOD) policy" (2021)[URL]
  53. Yim, MS, "Security Policy Compliance Motivation : From Technology Threat Avoidance Perspective", Digital Convergence Research, 19(11), pp.327~339 (2021)

관련 논문AI추천

이 간행물의 다른 논문 (14건)