• Journal of Digital Convergence
• /
• v.13 no.8
• /
• pp.133-144
• /
• 2015

In digital convergence environment, information security management plays crucial role in maintaining firms' competitiveness. Organizational citizenship behavior(OCB) enables informations security countermeasures to be more effectively worked by helping employees to have much knowledge of information security policy, by facilitating employees to participate in information security education/training. Thus, the purpose of this study is to investigate the mediating effect of OCB on the relationships between information security countermeasures and compliance intention. Questionary was designed based on prior information security research, and survey was conducted among companies' employees across the industry. Results showed that information security policy and information security education/training were found to be key predictors of compliance intention. In addition, OCB was proven to mediate the relationships between information security countermeasures and compliance intention.

• Journal of the Korea Society of Computer and Information
• /
• v.25 no.10
• /
• pp.69-75
• /
• 2020

Although various information and communication technologies occupy a place in daily life in the face of the fourth industrial revolution, the contents related to information security in elementary and secondary education courses are mainly related to personal information protection, and the contents and countermeasures of rapidly changing security threats are low in textbooks, and they are far behind the changes. To improve this, this paper suggests that education contents related to information security are included in elementary school real and middle school information textbooks, educational contents related to wireless network and PC security are included to cope with rapidly changing security threats that may arise from the age of the Internet of Things, non-face-to-face classes, and case-based information ethics education can be organized to eradicate curiosity about hacking. Through this paper, we will help prevent information security accidents by establishing basic security measures on our own and strengthening security awareness in the information age.

• Journal of Digital Convergence
• /
• v.12 no.2
• /
• pp.27-37
• /
• 2014

While organizations are making a considerable effort to leverage formal and informal control mechanisms (e.g., policies, procedures, organizational culture) to improve security, their impact and effectiveness is under scrutiny as employees seldom comply with information security procedures. The best way to ensure the viability of a security policy is to make sure users understand it and accept necessary precautions. From an organization's perspective, a lack of security knowledge and awareness on the part of employees is a major problem. However, previous studies suggest that effect of security awareness education is inconsistent. Thus, this study is to find the answer why security awareness education is not effective. Conclusions and implications are discussed.

• Korean Security Journal
• /
• no.59
• /
• pp.133-159
• /
• 2019

The free semester system, introduced on a trial basis in 2013, has been fully implemented in all middle schools since 2016. The free semester system for middle school students is divided into subject activities and free semester activities with the purpose of students' dream and career exploration. While the activities of various vocational groups linked to subjects during the free semester are discussed, studies on the industrial security career education in middle schools are hard to find. In addition, the career sites that provide diverse information on career path for teachers, students and parents with support from the Ministry of Education have not established any program regarding industrial security. This study aims to look at the status of career education by the analysis of keywords for industrial security in the career experience network currently operated by the Ministry of Education and in-depth interview with career education teachers, students and parents, and industrial security experts. Based on such analysis, this study attempts to figure out a comprehensive understanding of the free semester system and to explore strategies for promoting industrial security education. The results of this study found that the activation plan for industrial security education requires the industry security education through career network, development of industrial security education program, training and placement of professional industrial security lecturer, and establishment of support systems for experience in industrial security.

• Journal of Digital Convergence
• /
• v.10 no.4
• /
• pp.23-35
• /
• 2012

The goal of this study is to identify factors that influence on the persistent information security compliance intention of employees. Antecedents suggested in research model are security awareness training and perceived effectiveness of information security policy. Research results show that security awareness training has a positive effect on persistent information security compliance intention as well as effectiveness of information security policy. While policy breadth, which is one of the effectiveness of information security policy, influences on persistent information security compliance attitude and intention, policy brevity does not effect on persistent information security compliance intention. Conclusions and implications are discussed.

• Korean Security Journal
• /
• no.55
• /
• pp.75-95
• /
• 2018

The purpose of this study is to find the development of the examination security business plan based on the problem that guards are now aware of examination security service. To achieve the purpose of this study, the interview was conducted by interviewing interviews with five field related graduates and seven field specialists who are currently engaged in the examination for more than six years. The guard who perform national examination security service proposed a development plan of national examination security services as follows. First, the security guards at the national examination must complete an education program suitable for the nature of the workplace. Second, disaster and emergency response training should be added. Third, national examination security guards should be provided with mental training, search equipment and advanced equipment. Fourth, The National Examination Security Service should be specified in the Security Law so that laws and regulations can actively respond. Fifth, the related organization (contracting party) must raise the cost of service according to reality after realizing the property. Sixth, The national security service should ensure that security guards who have completed the security guards' training will be recruited.

• Convergence Security Journal
• /
• v.4 no.3
• /
• pp.9-18
• /
• 2004

This paper is to analyze security and technical problem of NEIS and suggest an improving methods about the effective system. Therefore questionnaire was performed in the five items with security as well as technical problem of NEIS to primary and secondary school teachers. The result of questionnaire analysis on each item is that they think of NEIS as the essential system for the age of information, despite problems such as the invasion of human right and security as well as reveal of personal data.

• Review of KIISC
• /
• v.19 no.1
• /
• pp.29-39
• /
• 2009

오늘날 기업 활동 전반에 걸쳐 네트워크 및 정보시스템에 대한 의존도가 높아지고 있는 추세에 따라 이를 대상으로 한 정보 보안 침해 역시 증가하고 있다. 우리나라의 산업 구조상 중소기업은 전체 사업체수를 기준으로 99%이상을 차지하고 있으며 특히 소기업 및 소상공인은 전체의 96%이상을 차지하고 있다. 중소기업은 그 규모의 특성상 상대적으로 정보보안 위협에 취약함이 지적되고 있으며 이들의 보안 역량 강화는 안전한 디지털 경제 환경을 조성하기 위한 핵심 과제로 떠오르고 있다. 그 중요성에 대한 인식을 기반으로 중소기업의 특성에 맞는 정보 보안 교육 훈련이 절실히 요구되고 있다. 본 논문에서는 우리나라 중소기업 및 정보 보안 관련 주무 기관인 중소기업청, 국가정보원 등과 더불어 민간 정보기술(IT)교육 훈련 기관들에서 실시되고 있는 중소기업을 위한 정보 보안 교육 훈련의 현황을 살펴보고 문제점을 파악하고자 한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2009.11a
• /
• pp.597-598
• /
• 2009

최근의 국가 민간의 정보시스템을 위협하는 공격들은 점점 더 복잡해지고 정교해지고 있다. 이러한 공격들에 대응하기 위하여 범국가적으로 사이버안전센터들이 설립 운영되고 있다. 그러나 이러한 대량의 정보보호 데이터를 수집 분석 대응하는 것은 여러 가지 어려움들이 존재한다. 그 문제의 본질적인 부분은 바로 방대한 데이터의 양(量)이다. 다수의 보안관제 대상 인프라들의 모든 보안데이터를 수집 하는 것은 사실상 불가능하며, 대부분의 센터들은 네트워크 접점에 중앙관리형 보안인프라를 설치함으로써 그 해결점을 찾고 있지만, 이는 최근의 나타나고 있는 다차원적인 공격에 대응하기에는 한계가 있다. 본 논문에서는 이러한 다차원 분석시스템의 기본데이터가 되는 여러 보안정보를 효과적으로 수집할 수 있는 보안정보 수집체계를 제시하고자 한다.

• Journal of the Institute of Electronics and Information Engineers
• /
• v.54 no.1
• /
• pp.46-52
• /
• 2017

Social attention to information security field is inspired, and manpower demand forecast of this area is getting high. This study surveyed information security knowledge of practitioners who work in a field of information security such as computer and network system. We analyzed a connection between survey data, information protection job system that was suggested by NICE, IT skills that NCS and KISA classified and security field classification system. Base on data that analyzed, this study suggests a curriculum that trains professional manpower who perform duties in the field of information security. Suggested curriculum can be applied to 2 year college, 3 year college and 4 year college. Suggested curriculum provides courses that students who want to work in a field of information security must learn during the college. Suggested courses are closely connected to a related field and detailed guideline is indicated to each course to educate. Suggested curriculum is required, and it combines a theoretical education that become basis and a practical education so that it is not weighted to learn theory and is not only focusing on learning simple commands. This curriculum is established to educate students countermeasures of hacking and security defend that based on scenario that connected to executive ability. This curriculum helps to achieve certificates related to a field more than paper qualification. Also, we expect this curriculum helps to train convergent information security manpower for next generation.