정보보안과 웹기반 회계정보만족도에 관한 연구
A Study on the Information Security and Web-Based Accounting Information Satisfaction
0
조회
0
다운로드
4
인용
0
참고문헌
키워드
초록
본 연구는 정보보안과 관련하여 행정안전부의 정보보호 수준의 관리지표인 정보보호 정책 환경, 정보침해대응과 회계정보만족도의 관계를 규명하기 위하여 실증 연구를 하였으며 그 결과를 요약하면 다음과 같다. 첫째, 정보보호 정책 환경변수 중에서 수집 및 보유, 기술기반은 5%의 유의수준에서 회계정보만족도에 통계적으로 정(+)의 유의한 영향을 미치는 것으로 나타났으나 정책기반은 회계정보만족도에 통계적으로 유의한 영향을 미치지 않는 것으로 나타났다. 이러한 결과는 정보수집, 정보파일대장, CCTV, 정보저장 및 출력매체가 잘 구비되어 있을수록 회계정보만족도는 높아진다고 볼 수 있다. 또한 정보보호시스템, 정보처리시스템의 접근통제, 정보를 저장․전송할 때 암호화가 잘 되어 있을수록 회계정보만족도가 높아진다는 것을 의미한다. 둘째, 정보침해대응 변수 중에서 웹사이트 정보노출 방지정책, 정보유출 대응절차, 정보침해 구제절차는 5%의 유의수준에서 회계정보만족도에 통계적으로 정(+)의 유의한 영향을 미치는 것으로 나타났으나, 이용 및 파기는 회계정보만족도에 통계적으로 유의한 영향을 미치지 않는 것으로 나타났다. 이러한 결과는 웹사이트 정보노출 방지정책에 대한 지원이 많을수록 회계정보만족도는 높아진다고 볼 수 있다. 또한 정보유출 대응절차에 적극적으로 참여할수록 회계정보만족도는 높아지고 손해배상제도와 같은 정보침해 구제절차가 잘 되어 있을수록 회계정보만족도는 높아진다는 것을 의미한다
Abstract
Today, the use of computers and software is an integral part of our daily work life. The ubiquitous use of information management software by workers is rampant in many officies, both large and small. However, it is believe that soft usage is illegal in Korea today, where approximately half of that software is used in companies. Realistically, we have to pay when we purchase any general goods. But in the case of software, there are possibilities of alternatives-such as illegally copied software. Business have been adopting security systems and making a variety of practical policies promoting and implementing information security awareness among employees in orer to safeguard valuable corporate information and resources. Firm implement public relations activities and offer security and privacy education for their staffs continuously. However corporate confidential information can be frequently stolen due to lack of employees’ security awareness. Small and medium-sized organization are also introducing various information technology and IT systems in order to secure competitiveness. Lack of prevention systems and awareness of adverse effects of information technology as well as the possibility of leakage, allows exposure to even more risk. Numerous cases related to information security leakage have been reported both at home and abroad, stressing the need for constant alertness. Thus, for small-medium companies to grow beyond survival, there must exist information as well as consideration of the possible detrimental effects of information, including preventative measures for such effects. Most companies introduce technical elements only as measures for information security and subsequent measures for individuals within an organization are minimal. this is due largely to a lack of consideration of situational factors, such as corporal culture and environment. Information security should begin from companies’ recognition of its undeniable importance. the fundamental issue of information security is based on human will and behavior to protect information and system. In Web-based, accounting information’s motivation is the essential component that enables the to participate in information spontaneously and continuously. The most effective strategy of accounting information’s motivation would be provided after the users’ motivation state is precisely measured in process and then prescribed according to results. The purpose of this study is to analyze the accounting information protective environment and accounting information infringement response which is considered to affect the satisfaction of accounting information. The major findings of the study are as follows. First, among accounting information protective policy environment, the support from collection and expense, technical base show the 5% of positive significance in the satisfaction of accounting information. But politic base does not affect the satisfaction of accounting information. This result suggests that the support from collection and expense is prior to other factors in the satisfaction of accounting information. The technical base in the maintenance of system is also importance to raise satisfaction of accounting information. It is needed to make Information protective system and Information encryption. Second, among accounting information infringement response variables, web site information exposure prevention policy, information leakage response procedures, information infringement remedial procedures affect positively the satisfaction of accounting information by 5%. However use and abandonment do not show significant relation with the satisfaction of accounting information. The result of the study show that it is needed to web site information exposure prevention policy and information leakage response procedures, information infringement remedial procedures. When information infringement remedial procedures are highly correlated with compensation for the loss system the satisfaction of accounting information is achieved. The study has been conducted via a questionnaire survey, the collectde data is somewhat small in scale. The limitation on this study was that only mutual effects between factors such as accounting information protective environment and accounting information infringement response. In future, the study that precisely measures related variables with clear understanding of those measurement factors should be encouraged.
참고문헌 (45)
- 감형규, "모멘텀 효과를 이용한 투자전략의 성과에 관한 연구", 기업경영연구, 18(1), pp.265~278 (2011), 한국기업경영학회
- 김건우, "정보보호 거버넌스 구현을 위한 핵심성공요인에 관한 연구", 디지털정책연구, 8(4), pp.97~108 (2010), 한국디지털정책학회
- 김동일, "회계정보시스템 유용성이 업무성과에 미치는 영향에 관한 실증적 연구", 한국콘텐츠학회 논문지, 5(5), pp.266~272 (2005), 한국콘텐츠학회
- 김민구, "웹기반 회계정보시스템의 정보보안 대책과 내부통제제도에 관한 연구", 석사, pp.2004
- 김종기, "보안정책, 보안의식, 개인적 특성이 패스워드 보안효과에 미치는 영향", 정보보호학회논문지, 18(4), pp.123~134 (2008), 한국정보보호학회
- 노미현, "ERP 시스템의 구현성공과 도입성과에 관한 연구", 중소기업연구, 26(1), pp.3~26 (2004), 한국중소기업학회
- 배일섭, "Policy Analyst 계량분석론" (2003), 시대고시기획
- 서병우, "중소기업의 경영전략과 회계정보시스템이 기업성과에 미치는 영향에 관한 연구", 유라시아연구, 7(4), pp.102~125 (2010), 아시아.유럽미래학회
- 신진교, "중소기업의 기술혁신 결정요인에 관한 실증연구", 기업경영연구, 16(4), pp.1~23 (2009), 한국기업경영학회
- 안중호, "처벌과 윤리교육이 정보보안준수에 미치는 영향: 조직유형의 조절효과를 중심으로", Information Systems Review, 12(1), pp.23~42 (2010), 한국경영정보학회
- 유혜원, "정보보호 분야 지식및 기술수요", 정보보호학회지, 19(1), pp.23~28 (2009), 한국정보보호학회
- 이경기, "우리사회 보안전략이 필요하다", 내일신문, ~ (2008)
- 이석준, "정보화 비용", 이익 분석요인에 대한인식도 연구, 2011, pp.11(4), 155~174[DOI]
- 이선경, "기업의 정보보호 정책과 구성원들의 정보보호 태도", 석사, pp.2010
- 전자정부 정보보호 정책개선방향, "임종인", 한국정보사회진흥원, 4~8 (2008)
- 장경서, "ERP 시스템 구현핵심성공요인에 관한 탐색적 연구", InformationSystems Review, 2(2), pp.255~281 (2000), 한국경영정보학회
- "전자신문" (2011)[URL]
- 정의정, "정보기술산업 발전에 따른 회계정보시스템 교재의 개선방안", 석사, pp.2010
- 채서일, "사회과학조사방법론" (2005), 학현사
- "한국정보보호진흥원"[URL]
- 한상일, "모바일 인터넷 서비스 사용 의도 영향요인", 기업경영연구, 17(2), pp.193~214 (2010), 한국기업경영학회
- 행정안전부, "국가정보보호백서" (2011)
- "KTV 한국정책방송"[URL]
- Aron, J. R, "The Benefits of a Notification Processin Addressing the Worsening ComputerVirus Problem : Results of a Survey and aSimulation Model", Computers and Security, 20(8), pp.693~714 (2001)
- Avision, D, "Using and Validating the Strategic AlignmentModel", Journal of Strategic Information Systems, 13(3), pp.223~246 (2004)
- Barki, H, "Change Attitude to Change, and Decision Support System Success", Information and Management, 9, pp.261~268 (1985)
- Belsis, P, "Information Systems Security from a KnowledgeManagement Perspective", InformationManagemen and Computer Security, 13(3), pp.189~202 (2005)
- Delone, W. H., "Determinants of Success for Computer Usage in Small Business", MIS Quarterly, 12(1), pp.51~61 (1988)
- Detmar, W. S, "Discovering and Disciplning Computer Abuse in Organization: A Field Study", MIS Quarterly, 14(1), pp.45~60 (1990)
- Dhillon, G., "Value-focused Assessment of Information System Security in Organization", Information Systems Journal, 16(3), pp.293~314 (2006)
- Everett, C. J., "Security Awareness : Switch to a Better Programme", Netwprl Security, 2, pp.15~18 (2006)
- Jeffery, M. S, "Analysis of End User Security Behaviors", Computers and Security, 24, pp.124~133 (2005)
- Kankanhalli. A, "An Integrative Study of Information Systems Security Effectiveness", International Journal of Information Management, 23, pp.139~154 (2003)
- Kirsch. L. J, "The Last Line of Defense: Motivating Employees to Follow Corporate Security Guideline, 28th", International Conference on Information System, Montreal, Information Systems Privacy and Security (2007)
- Krassie, P, "Expanding the Understanding : Transactions and Security Awareness for E-Business Students", NACCQ, 15, pp.93~100 (2002)
- Liang, T. P., "Critical Success Factors of Decision Support Systems An Experimental Study", Data Base, 17(3), pp.3~16 (1986)
- Paul, W, "Information Security Governance", Information Security Technical Report, 6(3), pp.60~70 (2001)
- Piccoli, G., "Web-Based Virtual Learning Environments : A Research Framework and a Preliminary Assessment of Effectiveness in Basic IT Skills Training", MIS Quarterly, 25, pp.401~426 (2001)
- Raymond, L., "Organizational Characteristics and MIS Success in the Context of Small Business", MIS Quarterly, 9(1), pp.37~52 (1992)
- Ronald, C. D., "Phishing for User Security Awareness", Computer and Security, 26(1), pp.73~80 (2007)
- Steve, A., "Awareness and Challenges of InternetSecurity", Information Management and Computer Security, 8(3), pp.131~143 (2000)
- Srinivasan, A., "Alternative Measures of Systems Effectiveness : and Implications", MIS Quarterly, 9(3), pp.243~253 (1985)
- Torkzadeh, G, "Test-Retest Reliability of the End-User Computing Satisfaction Instrument", Decision Sciences, 22, pp.26~37 (1991)
- Treck, D. R, "Information Systems Security and HumanBehavior", Behaviour and Information Technology, 26, pp.113~118 (2007)
- von Solms, B, "Information Security-The Fourth Wave", Computer and Security, 25(3), pp.165~168 (2006)
