[논문]정보보안 업무 스트레스의 완화: 정보보안 정책 목표 설정 및 조절초점의 역할

황인호

doi:10.13067/jkiecs.2023.18.6.1177

정보보안 업무 스트레스의 완화: 정보보안 정책 목표 설정 및 조절초점의 역할
The Mitigation of Information Security Role Stress: The Role of Information Security Policy Goal Setting and Regulatory Focus 원문보기

한국전자통신학회 논문지 = The Journal of the Korea Institute of Electronic Communication Sciences, v.18 no.6, 2023년, pp.1177 - 1188

황인호 (국민대학교 교양대학)

초록
AI-Helper

사회적으로, 조직들은 보유한 정보 자원의 엄격한 관리를 요구받고 있으며, 정보보안을 위한 기술과 정책에 투자를 높이고 있다. 반면, 조직원에 의한 정보 노출 위협은 지속해서 발생하고 있다. 연구의 목적은 보안정책에 의해 발생할 수 있는 업무 스트레스의 부정적 영향을 감소하는 방안을 제시하는 것이다. 세부적으로, 연구는 조직 환경(보안정책 목표 설정), 개인의 업무 지향성(조절초점) 요소를 반영하여, 업무 스트레스 완화 메커니즘을 제시하고자 하였다. 연구는 정보보안을 엄격하게 활용하고 있는 금융업 근로자에게 설문하였으며, 확보된 309건의 표본을 적용하여 가설을 검정하였다. 분석 결과, 연구는 보안정책 목표 관련 난이도와 구체성이 업무 스트레스(갈등, 모호성)를 감소시키고, 준수 의도에 영향을 주는 것을 확인하였다. 또한, 개인의 업무 향상 초점이 업무 스트레스와 상호작용 효과를 가져, 준수 의도에 미치는 부정적 영향을 축소할 수 있음을 확인하였다. 연구의 결과는 조직원의 보안 준수 강화를 위한 조직의 보안 전략 수립에 의미를 제공한다.

Abstract ▼ AI-Helper

Socially, organizations are required to maintain strict management of their information resources and invest in the adoption of information security (IS) technologies and policies. However, the ongoing threat of information exposure by employees persists within the organization. This study aims to identify the role stress that employees may experience due to strict IS policies and propose methods for reducing its negative impact. Specifically, our study suggests a mechanism for mitigating role stress by incorporating factors related to IS policy goal setting and work regulatory focus. We conducted a survey among workers in the financial industry, where IS policies are rigorously enforced, and tested our research hypotheses using a sample of 309 participants. The results indicate that increasing the difficulty and specificity of IS policy goals reduces role stress (conflict and ambiguity) and positively influences employees' intention to comply with IS policies. Furthermore, individual work promotion focus moderated the relationship between role stress and IS compliance intention. These findings have important implications for organizations seeking to strengthen their IS compliance among employees and inform the development of effective IS strategies.

주제어

표/그림 (8)

그림 그림 1. 연구모델 Fig. 1 Research Model
표 표 1. 표본의 특성 Table 1. Characteristics of samples
표 표 2. 타당성 및 신뢰성 Table 2. Construct validity and reliability
표 표 3. 판별 타당성 결과 Table 3. Result for discriminant validity
그림 그림 2. 구조방정식 모델링의 검증 결과 Fig. 2 Results of structural equation modeling tests
그림 그림 3. 업무 향상 초점의 조절 효과 (H4a) Fig. 3 Moderation effect of work promotion focus (H4a)
표 표 4. 구조방정식 모델링의 검증 결과 Table 4. Results of structural equation modeling tests
표 표 5. 조절 효과 결과 Table 5. Results of moderating effect tests

참고문헌 (38)

F. Kitsios, E. Chatzidimitriou, and M.？Kamariotou, "The ISO/IEC 27001 information？security management standard: How to extract？value from data in the IT sector," Sustainability,？vol. 15, no. 7, 2023, pp. 5828.

상세보기
Fortune Business Insights, "The global cyber？security market size is projected to grow from？$172.32$172.32 billion in 2023 to $424.97 billion in 2030,？at a CAGR of 13.8%," Report, Apr. 2023.
Verizon, "2021 data breach investigations report,"？Report, Dec. 2021.
K. D. Loch, H. H. Carr, and M. E. Warkentin,？"Threats to information systems: Today's reality,？yesterday's understanding," MIS Quarterly, vol.？16, no. 2, 1992, pp. 173-186.

상세보기
Y. Chen, K. Ramamurthy, and K. W. Wen,？"Organizations' information security policy？compliance: Stick or carrot approach?," J. of？Management Information Systems, vol. 29, no. 3,？2012, pp. 157-188.
A. Vance, M. Siponen, and S. Pahnila,？"Motivating IS security compliance: Insights？from habit and protection motivation theory,"？Information & Management, vol. 49, no. 3, 2012,？pp. 190-198.
H. Liang, Y. Xue, and L. Wu, "Ensuring？employees' IT compliance: Carrot or stick?,"？Information Systems Research, vol. 24, no. 2, 2013,？pp. 279-294.

상세보기
P. Ifinedo, "Exploring personal and environmental？factors that can reduce nonmalicious information？security violations," Information Systems？Management, vol. 40, no. 4 2023, pp. 1-21.
A. Tziner, E. Rabenu, R. Radomski, and A.？Belkin, "Work stress and turnover intentions？among hospital physicians: The mediating role？of burnout and work satisfaction," J. of Work？and Organizational Psychology, vol. 31, no. 3,？2015, pp. 207-213.
M. Tarafdar, Q. Tu, B. S. Ragu-Nathan, and T.？S. Ragu-Nathan, "The impact of technostress on？role stress and productivity," J. of Management？Information Systems, vol. 24, no. 1, 2007, pp.？301-328.
I. Hwang, S. Kim, and C. Rebman, "Impact of？regulatory focus on security technostress and？organizational outcomes: The moderating effect？of security technostress inhibitors," Information？Technology & People, vol. 35, no. 7, 2022, pp.？2043-2074.
S. Trang and I. Nastjuk, "Examining the role of？stress and information security policy design in？information security compliance behavior: An？experimental study of in-task behavior,"？Computers & Security, vol. 104, 2021, pp. 102222.
E. A. Locke and G. P. Latham, "Building a？practically useful theory of goal setting and task？motivation: A 35-year odyssey," American？Psychologist, vol. 57, no. 9, 2002, pp. 705-717.

상세보기
E. T. Higgins, "Beyond pleasure and pain,"？American Psychologist, vol. 52, 1997, pp.？1280-1300.

상세보기
M. J. Neubert, K. M. Kacmar, D. S. Carlson, L.？B. Chonko, and J. A. Roberts, "Regulatory focus？as a mediator of the influence of initiating？structure and servant leadership on employee？behavior" J. of Applied Psychology, vol. 93, no. 6,？2008, pp. 1220-1233.
Securityworld, "2023 security market report,"？Report, Dec. 2022.
Ministry of Science and ICT, "Survey for？information security industry in Korea: Year？2021," Report, Dec. 2021.
I. Hwang, "The impact of IS policy and sanction？perceptions on compliance intention through？justice: The role of justice sensitivity," J. of the？Korea Institute of Electronic Communication？Sciences, vol. 18, no. 2, 2023, pp. 337-348.
R. Ayyagari, V. Grover, and R. Purvis,？"Technostress: Technological antecedents and？implications," MIS Quarterly, vol. 35, no. 4, 2011,？831-858.

상세보기
D. Behrman and W. D. Perreault, "A role stress？model of the performance and satisfaction of？industrial salespersons," J. of Marketing, vol. 48,？no. 4, 1984, pp. 9-21.
I. Hwang, "The effect on the IS role stress on？the IS compliance intention through IS？self-determination: Focusing on the moderation？of person-organization fit," J. of the Korea？Institute of Electronic Communication Sciences, vol.？17, no. 2, 2022, pp. 375-386.
P. S. Galluch, V. Grover, and J. B. Thatcher,？"Interrupting the workplace: Examining stressors in an information technology context," J. of the？Association for Information Systems, vol. 16, no. 1,？2015, pp. 1-47.
I. Hwang and O. Cha, "Examining technostress？creators and role stress as potential threats to？employees' information security compliance,"？Computers in Human Behavior, vol. 81, 2018, pp.？282-293.

상세보기
Z. Yan, X. Guo, M. Lee, and D. R. Vogel, "A？conceptual model of technology features and？technostress in telemedicine communication,"？Information Technology & People, vol. 26, no. 3,？2013, pp. 283-297.

상세보기
J. D'Arcy and P. L. Teh, "Predicting employee？information security policy compliance on a？daily basis: The interplay of security-related？stress, emotions, and neutralization," Information？& Management, vol. 56, no. 7, 2019, pp. 103151.
E. A. Locke and G. P. Latham, "New directions？in goal setting theory," Current Directions in？Psychological Science, vol. 15, no. 5, 2006, pp.？265-268.

상세보기
I. Koskosas, "Goal setting and trust in a security？management context," Information Security J.: A？Global Perspective, vol. 17, no. 3, 2008, pp.？151-161.
B. E. Wright, "The role of work context in work？motivation: A public sector application of goal？and social cognitive theories," J. of Public？Administration Research and Theory, vol. 14, no. 1,？2004, pp. 59-78.
C. C. Durham, D. Knight, and E. A. Locke,？"Effects of leader role, team-set goal difficulty,？efficacy, and tactics on team effectiveness,"？Organizational Behavior and Human Decision？Processes, vol. 72, no. 2, 1997, pp. 203-231.

상세보기
J. C. Quick, "Dyadic goal setting and role stress:？A field study," Academy of Management J., vol.？22, no. 2, 1979, pp. 241-252.
X. Tang and X. Li, "Role stress, burnout, and？workplace support among newly recruited social？workers," Research on Social Work Practice, vol.？31, no. 5, 2021, pp. 529-540.
S. Glazer and C. Liu, Work, stress, coping, and？stress management. In O. Braddick (Ed.), Oxford？Research Encyclopedia of Psychology, 2017.
A. Steidle, C. Gockel, and L. Werth, "Growth or？security? Regulatory focus determines work？priorities," Management Research Review, vol. 36,？no. 2, 2013, pp. 173-182.
J. A. Gabisch and G. R. Milne, "Self disclosure？on the web: Rewards, safety cues, and the？moderating role of regulatory focus," J. of？Research in Interactive Marketing, vol. 7, no. 2,？2013. pp. 140-158.
V. Brenninkmeijer, E. Demerouti, P. M. le Blanc,？and I. J. Hetty van Emmerik, "Regulatory focus？at work: The moderating role of regulatory？focus in the job demands resources model,"？Career Development Int., vol. 15, no. 7, 2010, pp.？708-728.
J. C. Nunnally, Psychometric theory (2nd ed.). New？York: McGraw-Hill, 1978.
C. Fornell and D. F. Larcker, "Evaluating？structural equation models with unobservable？variables and measurement error," J. of Marketing？Research, vol. 18, no. 1, 1981, pp. 39-50.
A. F. Hayes, Introduction to mediation, moderation,？and conditional process analysis: A regression-based？approach. New York: Guilford Publications, 2017.

표제어: PCR

동의어: Packet Collision Rate

용어 설명 출처 목록 (6)

용어 설명: PCR은 세균 특이성이 있는 primer를 이용하여 적은 수의 세균이 있을지라도 쉽게 검출할 수 있는 유용한 방법이며, 이를 이용하여 구강 내 치면세균막이나 타액에서 직접 세균을 검출할 수 있게 되었다[8].

내보내기 구분	파일저장 인쇄 메일전송
구성항목	기본정보 상세정보 관리번호, 논문명, 저널/프로시딩명, 저자 , 발행년, 권, 호, 시작페이지, 끝페이지, 발행기관 관리번호, 논문명, 대등논문명, 저자 , 저널/프로시딩명, 발행기관, 발행년, 발행언어, 권, 호, 시작페이지, 끝페이지, ISBN, ISSN, 주제분야, 키워드, 초록(한글), 초록(영문), 저자(소속기관)
저장형식	Text(ASCII format) Excel format RefWorks Direct Export RIS format (for Reference Manager, ProCite, EndNote), Scholar's Aids, Mendeley
메일정보	받는사람 (필수) @ 보내는사람 (선택) @ 제목 내용 KISTI 검색결과 이메일 서비스
안내	총 건의 자료가 검색되었습니다. 다운받으실 자료의 인덱스를 입력하세요. (1-10,000) 검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다. 데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요) 다운로드 파일은 UTF-8 형태로 저장됩니다. 파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오. ~ Text(ASCII format) Excel format

연합인증