조직공정성이 보안관련 업무스트레스 및 부정적 행동에 미치는 영향
The Effect of Organizational Justice on Information Security-Related Role Stress and Negative Behaviors
0
조회
0
다운로드
4
인용
0
참고문헌
키워드
초록
최근 많은 조직들은 정보보안 기술에 투자를 통해, 그들의 정보자원 관리 및 보호를 위한 노력을 하고 있다. 그러나, 조직 내부자에 의한 정보보안 위협 요인은 줄지 않고 있다. 본 연구는 내부자들의 정보보안 부정적 행동에 영향을 미치는 요인을 찾는다. 세부적으로, 연구는 정보보안 관련 업무스트레스와 부정적 행동간의 관계를 찾고, 조직공정성이 업무스트레스를 완화하는 것을 제시한다. 즉, 연구 목적은 조직공정성, 정보보안관련 업무스트레스, 부정적 행동간의 연계 매커니즘을 제시하는 것이다. 매커니즘 요인 구성은 정보보안및 인사조직 관련 선행연구를 통해 도출되었다. 부정적행동은 회피행동과 이탈행동으로 구성하였으며, 보안관련 업무스트레스는 업무갈등과 업무스트레스로 구성된다. 그리고 조직공정성은 분배공정성, 절차공정성, 그리고 정보 공정성으로 구성된다. 연구 모델 검증은 구조방정식 모델링을 통해 실시하였다. 연구모델과 가설을 설립한 이후, 본 연구는 설문항목을 개발하고 정보보안 정책을 보유한 기업에 다니는 조직원 383명의 표본을 확보하였다. 연구 결과는 정보보안 관련 업무스트레스가 조직원들의 부정적 행동을 높이는 것을 증명하였으며, 조직공정성이 조직원에게 발생하는 업무스트레스를 완화하는 것을 제시하였다. 분석 결과는 내부자의 정보보안관련 부정적 행동을 최소화하기 위한 조직적 전략 수립 방향을 제시한다.
Abstract
In recent years, many organizations protect their information resources by investing in information security technology. However, information security threats from insiders have not been reduced. This study proposes a method for reducing information security threats within an organization by mitigating negative information security behaviors of employees. Specifically, the study finds a relationship between information security related role stress and negative behavior and suggests whether organizational justice mitigates role stress. That is, the purpose of the study is to suggest a mechanism between organizational justice, information security related role stress, and negative behavior. Negative behavior consist of avoidance behavior and deviant behavior, and security related role stress consist of role conflict and role ambiguity. Organizational justice consist of distributional justice, procedural justice, and informational justice. The research model is verified through structural equation modeling. After establishing a research model and hypothesis, we develop a survey questionnaire and collect data from 383 employees whose organizations have already implemented security policies. The findings appear that security related role stress increases negative behavior and that organizational justice mitigates role stress. The results of the analysis suggest the direction of organizational strategy for minimizing insider's security-related negative behaviors.
참고문헌 (47)
- IDC, "Worldwide Semiannual Security Spending Guide", ~ (2016)
- K. D. Loch, "Threats to Information Systems : Today's Reality, Yesterday's Understanding", MIS Quarterly, 16(2), pp.173~186 (1992)
- 2019 Data Breach Investigations Report, "Verizon", ~ (2019)
- J. D'Arcy, "User Awareness of Security Countermeasures and Its Impact on Information Systems Misuse : A Deterrence Approach", Information Systems Research, 20(1), pp.79~98 (2009)
- K. H. Guo, "The Effects of Multilevel Sanctions on Information Security Violations : A Mediating Model", Information and Management, 49(6), pp.320~326 (2012)
- N. S. Safa, "Information Security Conscious Care Behaviour Formation in Organizations", Computers and Security, 53, pp.65~78 (2015)
- C. Posey, "The Impact of Organizational Commitment on Insiders’ Motivation to Protect Organizational Information Assets", Journal of Management Information Systems, 32(4), pp.179~214 (2015)
- W. R. Flores, "Shaping Intention to Resist Social Engineering through Transformational Leadership, Information Security Culture and Awareness", Computers and Security, 59, pp.26~44 (2016)
- R. West, "The Psychology of Security", Communications of the ACM, 51(4), pp.34~40 (2008)
- I. Hwang, "Why not Comply with Information Security? An Empirical Approach for the Causes of Non-compliance", Online Information Review, 41(1), pp.1~17 (2017)
- J. D'Arcy, "Understanding Employee Responses to Stressful Information Security Requirements : A Coping Perspective", Journal of Management Information Systems, 31(2), pp.285~318 (2014)
- I. Hwang, "Examining Technostress Creators and Role Stress as Potential Threats to Employees' Information Security Compliance", Computers in Human Behavior, 81, pp.282~293 (2018)
- P. Ifinedo, "Understanding Information Systems Security Policy Compliance : An Integration of the Theory of Planned Behavior and the Protection Motivation Theory", Computers and Security, 31(1), pp.83~95 (2012)
- H. L. Chou, "An Analysis of Multiple Factors Relating to Teachers' Problematic Information Security Behavior", Computers in Human Behavior, 65, pp.334~345 (2016)
- J. M. Stanton, "Analysis of End User Security Behaviors", Computers and Security, 24(2), pp.124~133 (2005)
- Y. Chen, "Individuals' Internet Security Perceptions and Behaviors : Polycontextual Contrasts Between the United States and China", MIS Quarterly, 40(1), pp.205~222 (2016)
- H. Liang, "Understanding Security Behaviors in Personal Computer Usage : A Threat Avoidance Perspective", Journal of the Association for Information Systems, 11(7), pp.394~413 (2010)
- M. Siponen, "Neutralization : New Insights into the Problem of Employee Information Systems Security Policy Violations", MIS Quarterly, 34(3), pp.487~502 (2010)
- R. J. Bennett, "Development of a Measure of Workplace Deviance", Journal of Applied Psychology, 85(3), pp.349~360 (2000)
- A. M. Chu, "Development and Validation of Instruments of Information Security Deviant Behavior", Decision Support Systems, 66, pp.93~101 (2014)
- M. Salanova, "The Dark Side of Technologies : Technostress among Users of Information and Communication Technologies", International Journal of Psychology, 48(3), pp.422~436 (2013)
- M. Tarafdar, "The Impact of Technostress on Role Stress and Productivity", Journal of Management Information Systems, 24(1), pp.301~328 (2007)
- D. F. Parker, "Organizational Determinants of Job Stress", Organizational Behavior and Human Performance, 32(2), pp.160~177 (1983)
- R. Ayyagari, "Technostress : Technological Antecedents and Implications", MIS Quarterly, 35(4), pp.831~858 (2011)
- D. N. Behrman, "A Role Stress Model of the Performance and Satisfaction of Industrial Salespersons", Journal of Marketing, 48(4), pp.9~21 (1984)
- P. S. Galluch, "Interrupting the Workplace : Examining Stressors in an Information Technology Context", Journal of the Association for Information Systems, 16(1), pp.1~47 (2015)
- M. Vakola, "Attitudes towards Organizational Change : What is the Role of Employees' Stress and Commitment?", Employee Relations, 27(2), pp.160~174 (2005)
- A. Tziner, "Work Stress and Turnover Intentions among Hospital Physicians : The Mediating Role of Burnout and Work Satisfaction", Journal of Work and Organizational Psychology, 31(3), pp.207~213 (2015)
- M. T. Tsai, "Understanding Knowledge Sharing between IT Professionals : An Integration of Social Cognitive and Social Exchange Theory", Behaviour and Information Technology, 31(11), pp.1069~1080 (2012)
- P. E. Spector, "Industrial and organizational psychology", Research and Practice (2009)
- J. S. Adams, "Advances in experimental social psychology (Vol. 2)", pp.267~299 (1965), Academic Press
- G. C. Homans, "Social behavior: Its elementary forms" (1974), Harcourt Brace Jovanovich
- R. H. Moorman, "Relationship between Organizational Justice and Organizational Citizenship Behaviors : Do Fairness Perceptions Influence Employee Citizenship?", Journal of Applied Psychology, 76(6), pp.845~855 (1991)
- J. A. Colquitt, "On the Dimensionality of Organizational Justice : A Construct Validation of a Measure", Journal of Applied Psychology, 86(3), pp.386~400 (2001)
- Y. Zhang, "It's not Fair… or is It? The Role of Justice and Leadership in Explaining Work Stressor–Job Performance Relationships", Academy of Management Journal, 57(3), pp.675~697 (2014)
- C. B. Meyer, "Allocation Processes in Mergers and Acquisitions : An Organizational Justice Perspective", British Journal of Management, 12(1), pp.47~66 (2001)
- S. W. Hystad, "Moral Disengagement as a Mechanism between Perceptions of Organisational Injustice and Deviant Work Behaviours", Safety Science, 68, pp.138~145 (2014)
- T. A. Judge, "Organizational Justice and Stress : The Mediating Role of Work-family Conflict", Journal of Applied Psychology, 89(3), pp.395~404 (2004)
- P. M. Muchinsky, "Psychology Applied to Work: An Introduction to Industrial and Organizational Psychology" (2006), Cengage Learning
- H. Zhang, "The Mediating Roles of Organizational Justice on the Relationships between HR Practices and Workplace Outcomes : An Investigation in China", The International Journal of Human Resource Management, 20(3), pp.676~693 (2009)
- J. Greenberg, "Handbook of Organizational Justice" (2013), Psychology Press
- H. Li, "Exploring the Effects of Organizational Justice, Personal Ethics and Sanction on Internet Use Policy Compliance", Information Systems Journal, 24(6), pp.479~502 (2014)
- M. A. Alam, "Techno-stress and Productivity : Survey Evidence from the Aviation Industry", Journal of Air Transport Management, 50, pp.62~70 (2016)
- J. C, "Psychometric Theory" (1978), McGraw-Hill
- B. H. Wixom, "An Empirical Investigation of the Factors Affecting Data Warehousing Success", MIS Quarterly, 25(1), pp.17~41 (2001)
- C. Fornel, "Evaluating Structural Equation Models with Unobservable Variables and Measurement Error", Journal of Marketing Research, 18(1), pp.39~50 (1981)
- L. J. Williams, "An Alternative Approach to Method Effects by Using Latent-variable Models : Applications in Organizational Behavior Research", Journal of Applied Psychology, 79(3), pp.323~331 (1994)