해운항만조직 구성원들의 정보보안정책 준수에 영향을 미치는 요인

국문 초록 (Abstract)

정보기술의 발전은 기업에게 많은 이익을 가져다주었지만, 정보유출이라는 심각한 문제를 야기하고 있다. 이에 따라 기업들은 정보보안을 위해 정보보안정책을 수립하고 조직구성원들이 정보보안정책을 준수할 것을 요구하고 있다. 본 연구에서는 해운항만조직 구성원들의 정보보안정책 준수에 영향을 미치는 요인들을 실증분석 하기 위해 정보보안인식, 정보보안태도, 자기효능감, 규범신념, 사회적 영향들을 영향요인으로 선정하였다. 분석결과에 따르면, 해운항만조직 구성원들의 정보보안인식과 정보보안태도와의 관계는 긍정적으로 나타났으며, 정보보안태도와 정보보안정책 준수와의 관계도 긍정적으로 나타났다. 그리고 자기효능감과 정보보안정책 준수와의 관계, 사회적 영향과 정보보안정책 준수의 관계도 긍정적으로 나타났다. 하지만 규범신념과 정보보안정책 준수와의 관계는 유의하지 않은 것으로 분석되었다. 본 연구의 결과는 정보유출문제가 발생할 가능성이 큰 해운항만조직의 구성원들이 정보보안정책의 준수사항을 어느 정도로 받아들이는 지를 확인함으로써 해운항만조직에서 정보보안과 관련된 정책을 수립하는데 기반을 제공할 것으로 기대한다.

다국어 초록 (Multilingual Abstract)

Advances in information technology has brought many benefits to businesses, but at the same time, businesses are facing serious problems caused by its use such as information leakage. In order to cope with problems, companies have established information security policies, demanding workers of a company to be compliant with the policies. This study proposes a research model that includes information security awareness, information security attitude, self-efficacy, standard belief and social influences as factors that affect the compliance of information security policy among the workers of shipping and port organization. The results of this study showed that there was a positive relationship not only between the information security awareness and the information security attitude, but also between the information security attitude and the information security policy among the workers of shipping and port organization. It was also found that there was a positive relationship between the self-efficacy and the compliance of information security policy, and between the social influence and the compliance of information security policy. However, there was no meaningful relationship between the standard belief and the compliance of information security policy. This study examined to what extent the workers of shipping and port organization that have a high possibility of the information leakage were compliant with the information security policy. The findings will contribute to organizations of shipping and port who attempt to establish strategies related to information security.

목차 (Table of Contents)

• Abstract
• Ⅰ. 서론
• Ⅱ. 정보보안정책 준수 평가항목 및 선행연구
• Ⅲ. 연구 설계
• Ⅳ. 실증분석
• Ⅴ. 결론
• 참고문헌
• 국문요약

참고문헌 (Reference)

1 임채호, "효과적인 정보보호인식 제고방안" 16 (16): 30-36, 2006

2 장명희, "해운항만기업 정보시스템 리스크요인에 대한 발생가능성, 영향력 분석과 상대적 중요도 평가" 한국해운물류학회 25 (25): 57-82, 2009

3 노민선, "중소기업의 산업보안 역량에 대한 영향요인 평가" 한국행정학회 44 (44): 239-259, 2010

4 유혜원, "정보보호분야 지식 및 기술수요" 19 (19): 23-28, 2009

5 부산일보, "부산신항 배후단지 물류 정보 한 손에"

6 전자신문, "내부정보 유출 막아라, 기업들 비상, 해결책은?"

7 노순동, "기업체의 효율적인 보안관리 모델" 2004 (2004): 79-101, 2004

8 박준경, "기업 정보보호 활동을 위한 조직 구성원들의 태도와 주요 영향 요인" 한국경영학회 40 (40): 955-985, 2011

9 정보통신부, "국가정보보호백서" 2010

10 Carrie M., "You are the Key to Security: Establishing a Successful Security Awareness Program" 32 : 346-349, 2004

11 Venkatesh, V., "User Acceptance of Information Technology: Toward a Unified View" 27 (27): 425-478, 2003

12 Eagly, A. H., "The Psychology of Attitudes" Harcourt Brace Javanovich College Publishers 2006

13 Gist, M. E., "Self-efficacy: Implications for Organizational Behavior and Human Resource Management" 12 (12): 472-485, 1987

14 Bandura, A., "Self-Efficacy: Toward a Unifying Theory of Behavioral Change" 84 : 191-215, 1977

15 Goodhue, D. L., "Security Concerns of System Users: A Study of Perceptions of the Adequacy of Security Measures" 20 : 13-27, 1991

16 Rundmo, T., "Risk Perception by Offshore Oil Personnel During Bad Weather Conditions" 18 (18): 111-118, 1998

17 Davis, F., "Perceived Usefulness, Perceived Ease of Use, and User Acceptance of Information Technology" 13 (13): 319-340, 1989

18 Halibozek, E., "Mergers and Acquisitions Security, Corporate Restructuring and Security Management" Butterworth-Heinemann 2005

19 Amitava, D., "Management's Role in Information Security in a Cyber Economy" 45 : 67-87, 2001

20 Choi, N., "Knowing is Doing" 16 (16): 484-501, 2008

21 Bulgurcu B., "Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness" 34 (34): 523-548, 2010

22 Rice, R E. Gr., "Individual and Network Influences on the Adoption and Perceived Outcomes of Electronic Messaging" 12 (12): 27-55, 1990

23 Johnston, A. C., "Fear Appeals and Information Security Behaviors: An Empirical Study" 34 (34): 549-566, 2010

24 Siponen, M., "Critical Analysis of Different Approaches to Minimizing User-Related Faults in Information Systems Security: Implications for Research and Practice" 8 (8): 197-209, 2000

25 Straub, D. W., "Coping With Systems Risk: Security Planning Models for Management Decision Making" 22 : 441-469, 1998

26 Russell, D., "Computer Security Basics" O'Reilly & Associated 1991

27 Knapp, M., "Comparing Patterns and Costs of Schizophrenia Care in Five European Countries: the EPSILON Study. European Psychiatric Services: Inputs Linked to Outcome Domains and Needs" 105 : 42-54, 2002

28 Thomas, K., "Cognitive Elements of Empowerment: An "Interpretive" Model of Intrinsic Task Motivation" 15 : 666-681, 1990

29 Ajzen, I., "Attitude-Behavior Relation: A Theoretical Analysis and Review of Empirical Research" 84 (84): 888-918, 1997

30 Jeffrey, M. S., "Analysis of End User Security Behavior" 24 : 124-133, 2005

31 Stanton, J. M., "An Analysis of End User Security Behaviors" 24 : 124-133, 2005

32 디지털데일리, "2011년은 데이터 유출의 해, 트렌드마이크로 연간보고서 발표" 2012