정보보안정책태도와 준수행동의도성, 정보보안회피성이 정보보안위반행동에 미치는 영향 분석 -조절관점과 처벌관점을 중심으로-
Analysis of the Effects of Information Security Policy Attitude, Compliance Behavioral Intention, and Information Security Avoidance Tendency on Information Security Violation Behavior : Focusing on Regulation and Punishment
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
본 연구의 목적은 정보보안 정책의 특성이 정보보안과 관계되는 정보보안 과정에 미치는 영향을 이해하는 것이다. 연구 방법은 조절관점과처벌관점의 교차설계로 구성되었고, 정보보안 과정은 정보보안정책태도, 준수행동의도성, 정보보안회피성, 정보보안위반행동의 네 가지 변수로측정되었다. 연구 결과, 조절관점은 정보보안정책태도, 정보보안회피성, 정보보안위반행동에 유의미한 영향을 미치고 있었으며, 촉진 조건의 영향력이 예방 조건보다 더 큰 것으로 나타났다. 처벌관점은 정보보안회피성, 정보보안위반행동에 유의미한 영향을 미치고 있었으며, 명료성 조건의 영향력이 심각성 조건보다 더 큰 것으로 나타났다. 결과적으로 도출한 연구 모형은 측정변인으로 구조화된 복합 매개모형으로 확인되었다. 아울러, 논의점은 이러한 연구 성과를 반영하여 정보보안에 적합한시사점을 설명하고 있다
Abstract
The aim of this study to assess the effectiveness of information security policy attitude, compliance behavioral intention, information security avoidance tendency on information security violation behavior The research method design is a cross-design of Regulation and Punishment. The measurement variables used in the investigation are information security policy attitude, compliance behavioral intention, information security avoidance tendency, and information security violation behavior. As a result, the Regulation had a significant effect on information security policy attitude, information security avoidance tendency, information security violation behavior, and it was found that influence of the promotion-based condition was greater than the prevention-based condition. The punishment had a significant effect on information security avoidance tendency, information security violation behavior, and it was found that influence of the clarity-based condition was greater than the severity-based condition. The resulting exploration model was verified as a complex mediation model. In addition, the discussion contains the appropriate implications for information security based on these research results
참고문헌 (30)
- Bulgurcu, B., "Information security policy compliance : an empirical study of rationality-based beliefs and information security awareness", MIS quarterly, 34(3), pp.523~548 (2010)
- Corradini, I., "Building a Cybersecurity Culture in Organizations", pp.23~47 (2020), Springer
- Foulds, M. L., "Changes in locus of internal-external control : A growth group experience", Comparative Group Studies, 2(3), pp.293~300 (1971)[DOI]
- Herath, T., "Protection motivation and deterrence : a framework for security policy compliance in organisations", European Journal of Information Systems, 18(2), pp.106~125 (2009)
- Higgins, E. T, "Advances in experimental social psychology, Vol. 30", pp.1~46 (1998), Elsevier
- Hu, S. H., "Analysis of the impact of military organization's safety culture on safety behavior : Focusing on the mediating effect of safety leadership", Journal of Advances in Studies, 3(2), pp.63~81 (2020)[DOI]
- Hu, S. H., "Employment Trends in the Fourth industrial Revolution Era : Analysis of Hiring Trends of Autonomous Automobile Industry Related Companies", Journal of Digital Convergence, 17(1), pp.1~8 (2019)[DOI]
- Hu, S. H., "Analysis of the effects of Information Security Awareness, Response Efficacy, and Compliance Behavioral Intention on Information Security Behavior : Focursing on Availability and Culture", Journal of the Korea Convergence Society, 12(1), pp.211~218 (2021)[DOI]
- Hu, S. H, "Analysis of The Effects of Information Security Policy Sanction, Perceived Threat, and Perception of Information Security Climate on Compliance Behavioral Intention : Focursing on Prospectand Goal Orientation", Journal of the Korea Academia-Industrial cooperation Society, 22(1), pp.595~602 (2021)[DOI]
- 허성호, "자기통제 차원과 조직통제 차원이 정보보안 태도에 미치는 영향 분석", 디지털융복합연구, 19(8), pp.49~57 (2021), 한국디지털정책학회[DOI]
- Hu, S. H., "A Study on the Information Security Related Organizational Citizenship Behavior : From Prospect Theory and Goal Orientation Theory Perspective", Journal of Digital Convergence, 19(1), pp.89~97 (2021)
- Hwang, I., "Why not comply with information security? An empirical approach for the causes of non-compliance", Online Information Review, 41(1), pp.1~17 (2017)
- Hwang, I. H., "A Study on the Influence of Information Security Compliance Intention of Employee : Theory of Planned Behavior, Justice Theory, and Motivation Theory Applied", Journal of Digital Convergence, 16(3), pp.225~236 (2018)[DOI]
- Hwang, I. H., "The Mitigation of Information Security Related Technost ress and Compliance Intention", The Journal of Information Systems, 29(1), pp.2~ (2020)[DOI]
- 황인호, "조직구성원의 정보보안 준수 및 미준수 원인에 대한 연구", 한국융합학회논문지, 11(9), pp.229~242 (2020), 한국융합학회[DOI]
- Ifinedo, P., "Understanding information systems security policy compliance : An integration of the theory of planned behavior and the protection motivation theory", Computers & Security, 31(1), pp.83~95 (2012)[DOI]
- Ifinedo, P., "Informat ion systems security policy compliance : An empirical study of the effects of socialisation, influence, and cognition", Information &Management, 51(1), pp.69~79 (2014)[DOI]
- Khan, B., "Effectiveness of information security awareness methods based on psychological theories", African Journal of Business Management, 5(26), pp.10862~10868 (2011)[DOI]
- 이려화, "인간의 요소에 초점을 맞춘 정보 보안 전략 탐색", 교양학 연구, (6), pp.103~124 (2017), 다빈치미래교양연구소[DOI]
- Lee, S. J., "Roles of perceived behavioral control and self-efficacy to volunteer tourists' intended participation via theory of planned behavior", International Journal of Tourism Research, 20(2), pp.182~190 (2018)[DOI]
- Menard, P., "User mot ivat ions in protecting informat ion securi ty : Protection motivation theory versus self-determination theory", Journal of Management Information Systems, 34(4), pp.1203~1230 (2017)
- Milne, G. R., "Toward an understanding of the online consumer's risky behavior and protection practices", Journal of Consumer Affairs, 43(3), pp.449~473 (2009)
- Paolillo, J. G., "An empirical investigation of the influence of selected personal, organizational and moral intensity factors on ethical decision making", Journal of Business Ethics, 35(1), pp.65~74 (2002)
- "Home Textiles Market Size, Share &Trends Analysis Report by Product (Carpets & Floor Covering, Bathroom Linen, Bedroom Linen) , By Region, By Distribution Channel (Retail Outlet, Online ) , And Segment Forecasts, 2019–2025" (2019)[URL]
- Siponen, M., "Compliance with information security policies : An empirical investigation", Computer, 43(2), pp.64~71 (2010)[DOI]
- Stumpf, S. A., "Management promotions : Individual and organizational factors influencing the decision process", Academy of Management Review, 6(4), pp.539~549 (1981)
- Tredinnick, L, "Digital information culture: the individual and society in the digital age" (2008), Elsevier
- VandeWalle, D., "Development and validation of a work domain goal orientation instrument", Educational and psychological measurement, 57(6), pp.995~1015 (1997)[DOI]
- 2020 data breach investigations report, "Verizon", ~ (2020)
- Zhao, Y., "WeChat Users’ Information Protection Behavior Based on Prospect Theory", International Journal of Information and Education Technology, 9(6), pp.390~395 (2019)[DOI]