본문 바로가기
KERD
논문KCI 등재

기업 보안관리 강화의지 및 실행에 영향을 미치는 요인에 관한 연구

An Empirical Study on Influential Factors of the Development and Implementation in Firm Security Management

황종호
대한경영정보학회 (Daehan Academy Of Management Information Systems)|2013.06|경영과 정보연구 (Management & Information Systems Review)|제32권 제2호|pp. 213-235|DOI 10.29214/damis.2013.32.2.010

0

조회

0

다운로드

2

인용

0

참고문헌

키워드

Development인지요인Implementation보안관리Security ManagementCognitive Appraisals강화의지 및 실행IT불안정성IT volatility
주제분류경영학

초록

본 연구는 기업의 보안관리의 중요성이 커지고 있는 반면 이에 대한 이해와 관심이 부족한 현실을 지적하고 보안관리를 유연하게 실행할 수 있는 적절한 해결안을 조사하고자 한다. 따라서 본 연구는 보안관리의 강화의지 및 실행에 영향을미치는 요인으로 조직몰입, 보안위험 경험, 인지된 혜택, 파트너 의존성, 총 4가지의 외생변수를 제안하고 강화의지와 실행의 사이를 강화시켜줄 조절변수로 IT 불안정성을 제안하였다. 제안된 연구모형 검증하기 위해 AMOS 19.0을 사용하여209개 설문을 구조방정식 접근을 통해 분석하였다. 연구결과 파트너 의존성을 제외한 나머지 변수들, 즉 조직몰입, 보안위험 경험, 인지된 혜택, 파트너 의존성은보안관리 강화의지에 통계적으로 긍정적인 영향을 미치는 것으로 나타났다. 본연구의 결과를 바탕으로 기업단위의 보안관리에 대한 새로운 학문적 근거를 제안하고 실무적 관리 지침에 중요한 역할을 할 수 있을 것이다.

Abstract

This study investigates proper solution available for flexibly management pointing out reality a lack of understanding and interest for executing security management while importance of firm security management gets bigger. Accordingly, this study suggests 4 exogenous variables such as organizational commitment, experience of security risks, perceived benefits,partner interdependence as factors of having influence upon development and implementation in security management. It suggests IT volatility as moderating variable, which will intensify between development and implementation. The research model was tested by using Structural Equation Modeling, via Amos 19.0 analysis on a sample collected from 209 firms. As a result, the remaining variables except partner interdependence showed statistically positive influence. The implications of the findings suggest a new theoretical framework of the security management and offers important solutions for the practical application guidelines.

참고문헌 (50)

  1. Anderson, D. L., "Practicing safe computing : a multimethod empirical examination of home computer user security behavioral intentions", MIS Quarterly, 34(3), pp.613~643 (2010)
  2. Babatunde, D. A., "Investigating information security management and its influencing factors in the nigerian banking industry : a conceptual model", International Journal on Social Science, Economics & Art, 2(2), pp.5~59 (2012)
  3. Bajaj, A., "A feedback model to understand information system usage", Information & Management, 33(4), pp.213~224 (1998)
  4. Barclay, D., "The partial least squares(pls)approach to casual modeling : personal computer adoption and use as an illustration", Technology Studies, 2(2), pp.285~309 (1995)
  5. Baron, R. M., "The Moderator-Me diator Variable Distinction in social psychological research : conceptual, strategic, and statistical considerations", Journal of Personality and Social Psychology, 51(6), pp.1173~1182 (1986)
  6. Beznosov, K., "On the imbalance of the security problem space and its expected consequences", Information Management and Computer, 15(5), pp.420~431 (2007)
  7. Bichteler, J., "Technostress in libraries : causes, effects and solutions", Electronic Library, 5(5), pp.282~287 (1987)
  8. Bulgurcu, B., "Information security policy compliance : an empirical study of rationalitybased beliefs and information security awareness", MIS Quarterly, 34(3), pp.523~548 (2010)
  9. Boss, S. R., "If someone is watching, I’ll do what I’m asked : mandatoriness, control, and information security", European Journal of Information Systems, 18(2), pp.151~164 (2009)
  10. Chau, P. Y. K., "Organizational adoption of open systems : a 'technology-push, need-pull' perspective", Information & Management, 37(5), pp.229~239 (2000)
  11. Information security control resources in organizations: a multidimensional view and their key drivers, "Cavusoglu, H.", Sauder School of Business, University of British Columbia, ~ (2009)
  12. Chen, I. J., "Towards a theory of supply chain management : the constructs and measurements", Journal of Operations Management, 22(2), pp.119~150 (2004)
  13. Compeau, D., "Computer self-efficacy : development of a measure and initial test", MIS Quarterly, 19(2), pp.189~211 (1995)
  14. D’Arcy, J., "User awareness of security countermeasures and its impact on information systems misuse : a deterrence approach", Information Systems Research, 20(1), pp.79~98 (2009)
  15. Dhillon, G., "Current directions in IS security research : towards socioorganizational perspectives", Information Systems Journal, 11(2), pp.127~153 (2001)
  16. Dunca, R. B., "The characteristics of organizational environment and perceived environment uncertainty", Administrative Science Quarterly, 17(1), pp.313~327 (1972)
  17. DiMaggio, P. J., "The iron cage revisited : institutional isomorphism and collective rationality in organizational fields", American Sociological Review, 48(2), pp.147~160 (1983)
  18. Dutta, A., "Dynamics of organizational information security", System Dynamics Review, 24(3), pp.349~375 (2008)
  19. Finne, T., "Information systems risk management : key concepts and business processes", Computer & Security, 19(3), pp.234~242 (2000)
  20. Fornell, C., "Evaluating structural equation models with unobservable variables and measurement error", Journal of Marketing Research, 18(1), pp.39~50 (1981)
  21. Gupta, A., "Information systems security issues and decisions for small business: an empirical examination", Information Management & Computer Security, 13(4), pp.297~310 (2005)
  22. Hartwick, J., "Explaining the role of user participation in information system use", Management Science, 40(4), pp.440~465 (1994)
  23. Herath, T., "Protection motivation and deterrence : a framework for security policy compliance in organisations", European Journal of Information Systems, 18(2), pp.106~125 (2009)
  24. Hsu, C., "Institutional influences on information systems security innovations", Information Systems Research, 23(1), pp.1~22 (2012)
  25. Jahner, S., "Beyond technical aspects of information security: risk culture as a success factor for IT risk management", Proceedings of the 11th AMCIS (2005)
  26. Kankanhalli, A., "An integrative study of information systems security effectiveness", International Journal of Information Management, 23(2), pp.139~154 (2003)
  27. Kuan, K. K. Y., "A perception-based model for EDI adoption in small businesses using a technologyorganization- environment framework", Information & Management, 38(8), pp.507~521 (2001)
  28. Lee, M. S., "An empirical study about RFID acceptance : focus on the employees in korea", World Academy of Science, Engineering and Technology, 55, pp.1048~1057 (2009)
  29. Lee, S. M., "An integrative model of computer abuse based on social control and general deterrence theories", Information & Management, 41(6), pp.707~718 (2004)
  30. Lee, Y., "Threat of coping appraisal: determinants of SMB executives’ decision to adopt anti-malware software", European Journal of Information Systems, 18(2), pp.177~187 (2009)
  31. Li, H., "Under-standing compliance with internet use policy from the perspective of rational choice theory", Decision Support Systems, 48(4), pp.635~645 (2010)
  32. Pahnila, S., "Employees’ behavior towards IS security policy compliance", 40th Hawaii International Conference on System Sciences (2007)
  33. Siponen, M., "Neutralzation : new insights into the problem of employee information systems security policy violations", MIS Quarterly, 34(3), pp.487~502 (2010)
  34. Siponen, M., "Factors influencing protection motivation and IS security policy compliance", Innovations in Information Technology, pp.1~5 (2006)
  35. Spears, J. L., "User participation in information systems security risk management", MIS Quarterly, 34(3), pp.503~522 (2010)
  36. Stanton, J. M., "Examining the linkages between organizational commitment and information security", IEEE Systems, Man, and Cybernetics Conference (2003)
  37. Straub, D. W., "Effective IS security: an empirical study", Information Systems Research, 1(3), pp.255~276 (1990)
  38. Straub, D. W., "Coping with systems risk: security planning models for management decision making", MIS Quarterly, 22(4), pp.441~469 (1998)
  39. Tarafdar, M., "Impact of technostress on end-user satisfaction and performance", Journal of Management Information Systems, 27(3), pp.303~334 (2011)
  40. Thompson, R., "Personal computing: toward a conceptual model of utilization", MIS Quarterly, 15(1), pp.125~142 (1991)
  41. Thompson, R., "Influence of experience on personal computer utilization testing a conceptual model", Journal of Management Information Systems, 11(1), pp.167~187 (1994)
  42. Venkatesh, V., "Determinants of perceived ease of use : integrating control, intrinsic motivation, and emotion into the technology acceptance model", Information Systems Research, 11(4), pp.342~365 (2000)
  43. Venkatech, V., "User acceptance of information technology : toward a unified view", MIS Quarterly, 27(3), pp.425~478 (2003)
  44. von Solms, B., "The 10 deadly sins of information security management", Computers & Security, 23(5), pp.371~376 (2004)
  45. Walker, G., "A transaction cost approach to make-or-buy decisions", Administrative Science Quarterly, 29(3), pp.374~391 (1984)
  46. Werlinger, R., "Security practitioners in context: their activities and interactions with other stakeholders within organizations", International Journal of Human-Computer Studies, 67(7), pp.584~606 (2009)
  47. Whitman, M. E., "In defense of the realm : understanding threats to information security", International Journal of Information Management, 24(1), pp.43~57 (2004)
  48. Wixom, B., "An empirical investigation of the factors affecting data warehousing success", MIS Quarterly, 21(2), pp.17~41 (2001)
  49. Yildirim, E. Y., "Factors influencing information security management in smalland medium-sized enterprises : a case study from turkey", International Journal of Information Management, 31(4), pp.360~365 (2011)
  50. Zhu, K., "The process of innovation assimilation by firms in different countries : a technology diffusion perspective on e-business", Management Science, 52(10), pp.1557~1576 (2006)

관련 논문AI추천

조직구성원의 정보보안 준수 및 미준수 원인에 대한 연구허성호, 황인호한국융합학회 · 한국융합학회논문지2020 · 제11권 제9호기업 구성원들의 산업보안 인식 및 지식이 보안정책 준수의지에 미치는 영향에 대한 실증적 연구신은희, 이창무, 장항배한국산업보안연구학회 · 한국산업보안연구2020 · 제10권 제2호기업보안활동이 보안준수의도에 미치는 영향: 조직몰입과 자기효능감 매개효과나태현, 오주연, 이민형, 황지원한국산업보안연구학회 · 한국산업보안연구2021 · 제11권 제1호항만기업 종사자들의 정보보안인식과 지각된 정보보안위험에 영향을 미치는 요인강다연, 장명희한국항해항만학회 · 한국항해항만학회지2012 · 제36권 제3호최고 경영자의 정보보안 의식과 교육이 조직의 성과에 미치는 영향에 관한 연구김지헌, 정재훈, 최명길한국중소기업학회 · 중소기업연구2014 · 제36권 제2호보안관리 공정성이 IT 외주개발자의 보안준수 의지에 미치는 영향박현애, 유영천, 이재구, 이환수한국산업보안연구학회 · 한국산업보안연구2020 · 제10권 제2호

이 간행물의 다른 논문 (15건)

목표계획과정의 영향요인 탐색연구허근, 유재욱pp. 1-19상장 이전의 재무활동이 벤처기업의 상장유지(폐지)에 미치는 영향 분석전양진pp. 21-46대학병원 건강검진센터 이용자의 검진금액 차이에 관한 연구조덕영pp. 47-58기업의 사회 공헌 활동 인식에 대한 소비자 인식 차이 연구 : 진정성을 중심으로김지현, 강열우, 이종호, 윤대홍pp. 59-81컨버전스 제품 수용에 있어 소비자의 기능적 피로에 영향을 미치는 요인에 대한 연구김문태pp. 83-106
원문 보기