Browse > Article
http://dx.doi.org/10.13089/JKIISC.2016.26.1.227

Perceptual Differences between Managers and Practitioners on Competencies of Information Security Consultants  

Kim, Se-Yun (A3 Co., Ltd.)
Kim, Tae-Sung (Chungbuk National University)
Abstract
As various measures of law observance obligations such as mandatory obligation of privacy impact assessment (PIA) for public institutions and authorization of information security management system (ISMS) are put into practice, increase in demand for information security consulting and securement of information security consultants are emerging as a major issue. The purpose of this study is to empirically investigate what core competencies information security consultants should possess and how much they actually possess them. By analyzing the differences in perception between practitioners and managers on core competencies, this study understands difference of views between the two groups and suggests ideas for cultivation of information security consultants.
Keywords
Information security consultant; Competencies; Required level; Skilled level;
Citations & Related Records
Times Cited By KSCI : 4  (Citation Analysis)
연도 인용수 순위
1 Boannews, "Issue of information security breach and certification... the growth of information security market," 23 Jan. 2014.
2 Digital Times, "Knowledge and information security consulting market to grow," 21 May 2014.
3 Yong-Kyum Kim, Woo-Seung Choi, "Study on the taxonomy for knowledge/ skill about information security for information education practical utilization," The Journal of Business Education, 23(3), pp. 123-140, Oct. 2009.
4 Hye-Won Yoo, Tae-Sung Kim, "Considering information security professionals' career to analyze knowledge and skills requirements," Journal of the Korea Institute of Information Security and Cryptology, 19(4), pp. 77-89, Oct. 2009.
5 Hye-Won Yoo, Tae-Sung Kim, "Differences in perception of information security knowledge and skills between academia and industry," Information Systems Review, 11(2), pp. 113-129, Oct. 2009.
6 M.S. Lee, E.M. Trauth, D. Farwell, "Critical skills and knowledge requirements of IS professionals: A joint academic industry/investigation," MIS Quarterly, 19(3), 313-340, Sep. 1995.   DOI
7 R.D. McLachlin, "Factors for consulting engagement success," Management Decision, 37(5), 394-404, May 1999.   DOI
8 Hyo-Jung Jeon, Hye-Won Yoo, Tae-Sung Kim, "Analysis on knowledge and skills for information security professionals," Information Systems Review, 10(2), pp. 253-267, Oct. 2008.
9 Myung-Gil Choi, Se-Heon Kim "Analysis of knowledge and skill for security professionals," Asia Pacific Journal of Information Systems, 14(4), pp. 71-85, Dec. 2004.
10 M. Rynning, "Successful consulting with small and medium-sized vs large clients: meeting the needs of the client?" International Business Journal, 11(1), 47-60, Jan. 1992.
11 P.A. Todd, J.D. McKeen, and R.B. Gallupe, "The evolution of IS job skills: a content analysis of IS job advertisements from 1970 to 1990," MIS Quarterly, 19(1), 1-27, Mar. 1995.   DOI
12 National Competency Standards, http://www.ncs.go.kr/
13 Job Korea, http://www.jobkorea.co.kr/
14 Worknet, http://www.work.go.kr/
15 Small and Medium Business Administration, Practitioners' Manual for Information Security Consulting, Dec. 2007.
16 L.M. Spencer, S.M. Spencer, Competence at Work Models for Superior Performance, John Wiley & Sons, 1993.
17 A.D. Lucia, R. Lepsinger, The Art and Science of Competency Models: Pinpointing Critical Success Factors in an Organization, San Francisco : Jossey-Bass, 1999.
18 So Hyun Park, Kuk Hie Lee, "Consulting competence of IT consultants: Perceived differences between IT consultants and business clients," Information Systems Review, 11(1), pp. 107-132, Apr. 2009.