[논문]조직 정보보호성과에 영향을 미치는 정보보호담당임원의 내·외적 특성

오하경; 김태성

doi:10.21219/jitam.2020.27.4.001

조직 정보보호성과에 영향을 미치는 정보보호담당임원의 내·외적 특성
Internal and External Characteristics of Information Security Officers Affecting Organization's Information Security Performance 원문보기

Journal of information technology applications & management = 한국데이타베이스학회지, v.27 no.4, 2020년, pp.1 - 19

오하경 (Chungbuk Innovation Institute of Science & Technology) , 김태성 (Department of Management Information Systems, Chungbuk National University)

Abstract ▼ AI-Helper

Infringement of information security has caused the corporate image to be damaged and share price to fall, and it is emerging as an organizational risk. The value of information assets in enterprises has led to a higher level of security than in the past. As a result, companies are aware of the need for officers to protect information and to oversee a security management system. However, despite the growing importance of information security officers, there is a lack of research on their roles and characteristics. This study validates the relationship between determinants that affect the performance of information security. And a structural equation model was presented and empirically analyzed to see the impact of the internal and external characteristics of the staff in charge of information security on the organization's information security performance.

주제어

표/그림 (13)

그림 Research Model
표 Demographic Characteristics
표 Correlation Analysis Result
표 The Relationship between Internal Characteristics and Organization's Information Security Performance
표 Results of Hierarchical Regression Analysis Affecting Organization Information Security Performance
표 The Relationship between Personality Traits and Role
표 The Relationship between Personality Traits and Technical Background Knowledge
표 The Relationship between Personality Traits and Legal Background Knowledge
표 The Relationship between Personality Traits and Business Background Knowledge
표 The Relationship between Personality Traits and Relationship with CEO
표 Results of Analysis of the Mediated Effects of Legal Background Knowledge
그림 The Final Model of the Adopted Hypothesis
표 Result of Sobel Test

질의응답

핵심어	질문	논문에서 추출한 답변
	Big-five 모델의 요인 5가지는 무엇인가?	성격적 특성을 분류하는 여러 모델들 가운데 Big-five 모델로 널리 알려져 있는 성격 5요인 모델은 친화성(Agreeableness), 개방성(Openness), 성실성(Conscientiousness), 외향성(Extraversion), 신경성(Neuroticism)의 5개의 요인으로 분류된다[Digman, 1990]. 인간에게 공통적으로 존재하는 5개의 요인은 개인차로 인해 행동에 영향을 미친다[Lee and Kim, 2010].
	개인외적 특성이란?	개인외적 특성이란 환경과 그 안에서의 상호작용을 통하여 형성되는 것이다[Choi and Shin, 2012]. 위지영 외[2014]는 CPO의 특성이 조직의 개인정보보호 성과에 미치는 영향을 설명하였고, 특성을 역할, 배경지식 등으로 구분하였다.
	관계법령은 정보보호담당임원의 수행해야 하는 각 직책의 역할을 어떻게 정의하고 있는가?	정보보호담당임원의 수행해야 하는 각 직책의 역할은 관계법령에서 정의하고 있다. CPO는 개인정보보호법, 정보통신망 이용촉진 및 정보보호 등에 관한 법률(이하 정보통신망법)에서, CIO는 국가정보화 기본법에서, CSO와 CISO는 정보통신망법과 전자금융거래법에서, DPO는 GDPR에서 각 직책의 업무 역할을 정의하였다.

참고문헌 (44)

Applegate, L. M. and Elam, J. J., "New information systems leaders : a changing role in a changing world", MIS Quarterly, Vol. 16, No. 4, 1992, pp. 469-490.

상세보기
Banker, R. D., Hu, N., Pavlou, P. A., and Luftman, J., "CIO reporting structure, strategic positioning, and firm performance," MIS Quarterly, Vol. 35, No. 2, 2011, pp. 487-504.

상세보기
Barker, III V. L. and Mueller, G. C., "CEO characteristics and firm R&D spending," Management Science, Vol. 48, No. 6, pp. 782-801, 2002.

상세보기
Baron, R. M. and Kenny, D. A., "The moderator- mediator variable distinction in social psychological research : conceptual, strategic, and statistical considerations," Journal of Personality and Social Psychology, Vol. 51, No. 6, 1986, pp. 1173-1182.

상세보기
Bennett, S. C., "Do you need a chief privacy officer", Practical Lawyer-Philadelphia, Vol. 53, No. 1, 2007, pp. 17-20.

상세보기
Choi, H.-M. and Shin, D.-J., "An analysis of the effects of young children's personal characteristics and external variables on their self-esteem", Korean Journal of Early Childhood Education, Vol. 32, No. 1, 2012, pp. 133-158.
Costa, P. T. and McCrae, R. R., "Professional manual : revised NEO personality inventory( NEO-PI-R) and NEO five-factor inventory(NEO-FFI)", Odessa, FL : Psychological Assessment Resources, 1992.
Daft, R. L. and Lengel, R. H., "Organizational information requirements, media richness and structural design,"Management Science, Vol. 32, No. 5, 1986, pp. 554-571.

상세보기
Digman, J. M., "Personality structure : emergence of the five-factor model", Annual Review of Psychology, Vol. 41, No. 1, 1990, pp. 417-440.

상세보기
Doll, W. J. and Torkzadeh, G., "The measurement of end-user computing satisfaction", MIS Quarterly, Vol. 12, No. 2, 1988, pp. 259-274.

상세보기
Financial Services Commission, Electronic Financial Transactions Act, No. 14828, 2017. 04. 18.
Hambrick, D. C. and Mason, P. A., "Upper echelons : the organization as a reflection of its top managers", Academy of Management Review, Vol. 9, No. 2, 1984, pp. 193-206.

상세보기
Hart, S. L. and Quinn, R. E., "Roles executives play : CEOs, behavioral complexity, and firm performance", Human Relations, Vol. 46, No. 5, 1993, pp. 543-574.

상세보기
Hong, K.-H., "A study on the effect of information security controls and processes on the performance of information security", Ph.D. Dissertation, Kookmin University, Seoul, Korea, 2003.
Jang, S.-S., Noh, B.-N., and Lee, S.-J., "The effects of the operation of an information security management system on the performance of information security", Journal of KIISE : Information Networking, Vol. 40, No. 1, 2013, pp. 58-69.
Jones, M. C., Taylor, G. S., and Spencer, B.A., "The CEO/CIO relationship revisited : an empirical assessment of satisfaction with IS", Information & Management, Vol. 29, No. 3, 1995, pp. 123-130.

상세보기
Ju, Y.-J., "A study on the effects of personal characteristics on the organizational citizenship behavior", Master Thesis, Chonnam National University, Kwangju, Korea, 2000.
Kim, J.-K. and Jeon, J.-H., "Comparison of users' perception of information security elements on computer virus between large and small-and-medium companies", Journal of the Korea Institute of Information Security and Cryptology, Vol. 16, No. 5, 2006, pp. 79-92.
Kim, J.-S., Kim, J.-B., and Shin, Y.-T., "A study on the effect of CISO's recognition of the role to the information security performance", The Korean Society of Management Consulting, Vol. 12, No. 4, 2012, pp. 21-34.
Kim, J.-Y. and Kim, T.-S., "Who cares more about security? : effects of personality traits on PC security intention", Information Systems Review, Vol. 20, No. 1, 2018, pp. 99-114.

원문보기 상세보기
Korea Communications Commission, Act on Promotion of Information and Communications Network Utilization and Information Protection, ETC., No. 15628, 2018. 06. 12.
Korea Internet & Security Agency, 2012 Survey on the Information Security, 2012.
Lee, I.-S., "An analysis of big 5 personality model and business ethics as factors for organizational effectiveness",Korean Management Review, Vol. 32, No. 6, 2003, pp. 1593-1621.
Lee, J.-H. and Kim, J.-W., "Relationship of information technology user personality, security and control", The Journal of Information Systems, Vol. 19, No. 3, 2010, pp. 1-12.
Li, Y. and Tan, C. H., "Matching business strategy and CIO characteristics : the impact on organizational performance", Journal of Business Research, Vol. 66, No. 2, 2013, pp. 248-259.

상세보기
Liang, H. and Xue, Y., "Understanding security behaviors in personal computer usage : a threat avoidance perspective", Journal of the Association for Information Systems, Vol. 11, No. 7, 2010, pp. 394-413.

상세보기
McBride, M., Carter, L., and Warkentin, M., "Exploring the role of individual employee characteristics and personality on employee compliance with cybersecurity policies", RTI International-Institute for Homeland Security Solutions, 2012.
Ministry of Science and ICT, Act on the Protection of Information and Communications Infrastructure, No. 15376, 2018. 02. 21
Ministry of Science and ICT, Framework Act on National Informatization, No. 15786, 2018. 10. 16.
Ministry of the Interior and Safety, Personal Information Protection Act, No. 14839, 2017.07.26.
Mintzberg, H., "Managerial work : analysis fromobservation",Management Science, Vol. 18, No. 2, 1971, pp. B-97.

상세보기
Ng, B. Y., Kankanhalli, A., and Xu, Y. C., "Studying users' computer security behavior : a health belief perspective", Decision Support Systems, Vol. 46, No. 4, 2009, pp. 815-825.

상세보기
Park, M.-J., Chai, S.-M., and Lee, M.-J., "A study on the establishment of Data Protection Officer(DPO) position under GDPR enactment", Journal of Korean Institute of Communications and Information Sciences, Vol. 43, No. 2, 2018, pp. 427-438.

상세보기
Selznick, P., Leadership in Administration, New Yotk : Harper and Row, 1957.
Shin, H.-C. and Yoon, S.-M., "The role of big-five personality traits as the individual difference variable affecting the effectiveness of happiness-enhancing intervention activities", Korean Journal of Counseling and Psychotherapy, Vol. 25, No. 2, 2013, pp. 275-308.
Shropshire, J., Warkentin, M., and Sharma, S., "Personality, attitudes, and intentions : predicting initial adoption of information security behavior", Computers & Security, Vol. 49, 2015, pp. 177-191.

상세보기
Song, J.-J., SPSS/AMOS statistical analysis method for writing papers, Oct. 2015.
Sun, H.-G., "A study on the effect of information security policy and organization on the performance of information security", Proceedings of the Korea Society of Management information Systems, 2005, pp. 1087-1095.
Veritas, Veritas Global Data Privacy Consumer Study, 2018.
Watson, R. T., "Influences on the IS manager's perceptions of key issues : information scanning and the relationship with the CEO", MIS Quarterly, Vol. 14, No. 2, 1990, pp. 217-231.

상세보기
Wee, J.-W., Jang, J.-Y., and Kim, B.-S., "The impact of CPO characteristics on organizational privacy performance", Asia Pacific Journal of Information Systems, Vol. 24, No. 1, 2014, pp. 95-114.
Wood, C. C., "Policies alone do not constitute a sufficient awareness effort",Computer Fraud & Security, No. 12, 1997, pp. 14-19.
Yoo, J.-H., Jie, S.-H., and Lim, J.-I., "Estimating direct costs of enterprises by personal information security breaches", International Journal of Reliable Information and Assurance, Vol. 19, No. 4, 2009, pp. 63-75.
Yoo, T.-Y. and Min, B. M., "Predictability of big-five personality model to performance in a variety of settings and its limitation : a meta-analysis", Korean Journal of Industrial and Organizational Psychology, Vol. 14, No. 2, 2001, pp. 115-134.

저자의 다른 논문 :

표제어: PCR

동의어: Packet Collision Rate

용어 설명 출처 목록 (6)

용어 설명: PCR은 세균 특이성이 있는 primer를 이용하여 적은 수의 세균이 있을지라도 쉽게 검출할 수 있는 유용한 방법이며, 이를 이용하여 구강 내 치면세균막이나 타액에서 직접 세균을 검출할 수 있게 되었다[8].

내보내기 구분	파일저장 인쇄 메일전송
구성항목	기본정보 상세정보 관리번호, 논문명, 저널/프로시딩명, 저자 , 발행년, 권, 호, 시작페이지, 끝페이지, 발행기관 관리번호, 논문명, 대등논문명, 저자 , 저널/프로시딩명, 발행기관, 발행년, 발행언어, 권, 호, 시작페이지, 끝페이지, ISBN, ISSN, 주제분야, 키워드, 초록(한글), 초록(영문), 저자(소속기관)
저장형식	Text(ASCII format) Excel format RefWorks Direct Export RIS format (for Reference Manager, ProCite, EndNote), Scholar's Aids, Mendeley
메일정보	받는사람 (필수) @ 보내는사람 (선택) @ 제목 내용 KISTI 검색결과 이메일 서비스
안내	총 건의 자료가 검색되었습니다. 다운받으실 자료의 인덱스를 입력하세요. (1-10,000) 검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다. 데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요) 다운로드 파일은 UTF-8 형태로 저장됩니다. 파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오. ~ Text(ASCII format) Excel format

연합인증