• Title/Summary/Keyword: 보안 분위기

Search Result 20, Processing Time 0.026 seconds

An Effect of Organizational Security Climate on Individual's Opportunistic Security Behavior: An Empirical Study (조직의 보안 분위기가 개인의 기회주의 행동에 미치는 영향에 관한 실증 연구)

  • Yim, Myung-Seong
    • Journal of Digital Convergence
    • /
    • v.10 no.10
    • /
    • pp.31-46
    • /
    • 2012
  • Drawing upon Griffin and Neal's safety climate and performance model, this study developed an information security climate model. Research model is composed of three research variables that include information security climate, information security compliance attitude, and opportunistic security behavior. Results of the study strongly support the fundamental proposition that the organizational security climate has significant positive influence on the individual's opportunistic security behavior. However, the study also reveals that the organizational climate may not directly associate with the reduction of opportunistic security behavior. Rather the organizational security climate nurtures the favorable attitude of the employee towards the compliance of information security, which in turn discourages opportunistic security behavior.

The Effect on the IS Psychological Empowerment on the Mitigation of IS Policy Resistance Through IS Role Stress: Focusing on the Moderation of IS Justice Climate (정보보안 심리적 권한이 업무 스트레스를 통해 정책 저항 완화에 미치는 영향: 공정성 분위기의 조절 효과)

  • Hwang, In-Ho
    • The Journal of the Korea institute of electronic communication sciences
    • /
    • v.17 no.1
    • /
    • pp.1-12
    • /
    • 2022
  • An insider's information security incidents continue to occur, there is a growing demand for strengthening information security within the organization. However, when strict information security policies and rules are applied to employees of the organization, it can result as an information security stress and resistance behavior. The purpose of this study is to suggest the causes of insiders' negative information security behavior and factors that mitigate the cause. In particular, the study identifies how the mutual influence of individual (psychological empowerment) and organizational (justice climate) factors mitigates negative behavior. In this study, a sample was obtained by surveying workers of organizations that reflect information security policies to insiders, and hypothesis testing was performed by structural equation modeling. As a result of the analysis, role stress had a partial mediating effect on the effect of psychological empowerment on security policy resistance, and the justice climate strengthened the effect of psychological empowerment. Our results suggest a direction for reducing insider information security policy resistance, so it helps to establish a strategy for achieving internal information security goals.

Building an IS Environment and Support Structure for Insiders to Comply with IS: A Perspective on Improving the IS Related Justice Climate (내부자의 정보보안 준수를 위한 정보보안 환경 및 지원 체계 구축: 정보보안 공정성 분위기 강화 관점)

  • Hwang, In-Ho
    • The Journal of the Korea institute of electronic communication sciences
    • /
    • v.17 no.5
    • /
    • pp.913-926
    • /
    • 2022
  • As information is recognized as a core competency of organizations, organizations are increasingly investing in policies and technologies for information security(IS). Recently, as information exposure accidents by people have occurred continuously, interest in IS behaviors of organization insiders is increasing. This study aims to confirm the effect of the IS environment and support structure established by the organization on the intention of individuals to comply with IS. We conducted a survey of employees in organizations with IS policies and tested the hypothesis using the structural equation of AMOS 22.0 and Process 3.1 using 421 samples. As a result of the analysis, authentic leadership and justice climate, which are factors that build an IS environment, and communication and feedback, which are factors supporting IS compliance, have a positive effect on employees' compliance intention. In addition, authentic leadership, punishment, communication, and feedback were found to reinforce the positive impact of IS justice climate. As the study suggested the overall structural design direction to be pursued to reinforce insider's IS behavior, and the results help to achieve the IS goal.

The Influence of Competitive Psychological Climate and IS Related Anxiety: The Role of IS Related Value Dissimilarity (경쟁적 심리 분위기와 정보보안 걱정의 영향: 정보보안 가치 차이의 역할)

  • In-Ho Hwang
    • The Journal of the Korea institute of electronic communication sciences
    • /
    • v.18 no.4
    • /
    • pp.649-660
    • /
    • 2023
  • The study aims to identify the complex effects of information security (IS) environments and individuals' IS-related perceptions and value dissimilarity that negatively affect insiders' IS compliance activities. In detail, the study aimed to confirm the roles of prospective and inhibitory anxiety, and value dissimilarity in the process in which a competitive psychological climate negatively affects IS compliance intentions. The study obtained 387 samples from the firm's workers with IS-related regulations and verified the research hypotheses established using the AMOS 22.0 and Process 3.1 tools. As a result, the competitive psychological climate negatively affected IS compliance intention by increasing individual's IS-related prospective and inhibitory anxiety. In addition, IS-related value dissimilarity had an interactive effect with prospective and inhibitory anxiety and had a negative effect on IS compliance intention. This study has practical implications in terms of presenting information and values to be provided to employees to achieve internal IS goals and has academic implications in terms of applying the complex effects of IS-related anxiety and value dissimilarity.

Analysis of The Effects of Information Security Policy Sanction, Perceived Threat, and Perception of Information Security Climate on Compliance Behavioral Intention: Focursing on Prospect and Goal Orientation (정보 보안 제재성과 위협 인식, 분위기 인식이 준수 행동 의도성에 미치는 영향 분석: 전망 관점과 목표 지향 관점을 중심으로)

  • Hu, Sung Ho;Hwang, In-Ho
    • Journal of the Korea Academia-Industrial cooperation Society
    • /
    • v.22 no.1
    • /
    • pp.595-602
    • /
    • 2021
  • This study evaluates the impact of an information security policy sanction, a perceived threat, and the perception of the information security climate on a compliance behavioral intention. The research method was structured with a cross-sectional study design for the prospect and goal orientation. The variables used in the analysis are information security policy sanction, perceived threat, perception of information security climate, and compliance behavioral intention. Progress in this research consists of measuring the prospect and goal orientation, and then measuring the four variables. As a result, the prospect had a significant effect on the perception of the information security climate, and it was found that the influence of the gain-based condition was greater than the loss-based condition. Goal orientation had a significant effect on the information security policy sanction, the perceived threat, and the compliance behavioral intention, and the influence of the development-based condition was greater than the stability-based condition. Both prospect and goal orientation had an interactive effect on the compliance behavioral intention. The exploration model was verified as a mediation model. In addition, the discussion includes the appropriate implications for information security based on these research results.

인터뷰-심종현 유넷시스템 사장

  • Korean Associaton of Information & Telecommunication
    • 정보화사회
    • /
    • s.189
    • /
    • pp.16-17
    • /
    • 2007
  • '정보보호 사업 2기 시대'를 선언하면서 야심차게 차세대 보안 솔루션을 주력으로 사업에 진출한 유넷시스템. 삼성그룹 계열사인 시큐아이닷컴에서 분사해 지난 2003년 법인 설립 5년 만에 가장 떠오르는 분야로 지목되고 있는 네트워크접근제어(NAC),유.무선 통합인증 시장에서 외산 제품과 경쟁하며 국산 솔루션으로는 보기 드물게 두각을 나타내고 있다. 특히, 유넷시스템의 NAC제품인 '애니클릭 NAC'은 금호생명, 롯데그룹, 보라매병원, 신한은행 등 16군데에 공급되면서 이 시장에서 선두를 달리고 있는 상황이다. 또, 최근 무선랜 보안 시장이 확산될 분위기가 한창 조성되고 있어 유.무선 통합인증 시장 공략에도 박차를 가하고 있다 뿐만 아니라 내년에는 홈네트워크 보안 시장에도 진출할 계획이어서, 무선 네트워크 관련 사업 범위를 크게 확장할 예정이다.

  • PDF

ISO TC307 블록체인 국제표준화 동향

  • Jae Hoon NAH
    • Review of KIISC
    • /
    • v.33 no.4
    • /
    • pp.125-129
    • /
    • 2023
  • ISO/TC307 기술위원회는 분산원장 기초적인 기술표준에서 응용, 디지털자산 및 디지털 화폐와 같은 응용/서비스 표준개발로 중심이 이동한 듯한 분위기이다. 영국이 TC68과의 협동으로 디지털 화폐 개발에 열정을 보이고 있다. 금융대국영국이 블록체인 기반 디지털 금융 산업에서 선두 지위를 확보하고자 노력하고 있다는 것을 피부로 느낄 수 있는 회의였다고 판단이 된다. 한편 미국은 NFT를 이용한 물리 자산의 디지털 표현 표준을 담당하는 WG8을 신설 한 것은 선진국가들이 블록체인을 이용하여 산업의 실질 표준개발을 지향하고 있다고 판단한다. 이에 한국에서도 블록체인감사지침, 분산원장을 위한 27002 등을 제안하여 표준개발 중이다.

The Effects of information security perceptions of collaborative system managers on intention to use SBOM(Software Bill Of Materials) : Focusing on the Theory of Planned Behavior (협업시스템 담당자의 정보보안 인식이 SBOM(Software Bill Of Materials) 도입 의도에 미치는영향: 계획된 행동이론을 중심으로)

  • Noh Hyeyoung;Lee Sin-Bok
    • The Journal of the Convergence on Culture Technology
    • /
    • v.9 no.5
    • /
    • pp.463-474
    • /
    • 2023
  • Advances in technology have made it easier for organizations to share information and collaborate. However, collaboration systems where multiple entities share and access information are vulnerable to security. The concept of Software Bill Of Materials (SBOM) has emerged as a way to strengthen information security by identifying and transparently managing the components of software programs. To promote the adoption of SBOM in Korea, this study investigated the intention to use of collaboration system managers. This study was based on the theory of planned behavior and the integrated technology acceptance theory. The results of this study confirmed that performance expectations from SBOM adoption were an important variable for intention to use, and positive attitudes toward security also had an indirect effect through performance expectations. We found that SBOM adoption has an important causal relationship with performance due to the fact that it is targeted at enterprises, and that positive attitudes toward security and social climate can have a strong effect on intention to use.

The study on the Effectiveness Improvement of physical security system: Focused on the Disaster Safety Awareness (시설보안시스템의 효과적 안전관리를 위한 연구: 재난안전의식을 중심으로)

  • Kim, Changho;Shin, Soyoung
    • Journal of the Society of Disaster Information
    • /
    • v.11 no.4
    • /
    • pp.615-621
    • /
    • 2015
  • Man-made disasters are disastrous event, which can be reduced the damage through preventive measures and thorough inspections, unlike natural disasters. Thus, safety consciousness of citizens is not only important, but also safety consciousness of security guard who are involved with facility safety management. In other words, safety consciousness and fostering professionalism of security guards could reduce the damage, including human disaster and it enables the effective safety management. Therefore, this study selected the training and the organizational safety as variables with the influencing factors for improving the disaster safety consciousness of facility guard. After the analysis, the following results were confirmed. First, the training content and its environment would have a significant impact on the disaster safety consciousness. Second, organizational safety would have a significant impact on disaster safety consciousness. In other words, the improvement of training program and the formation of safety culture in organizational level will have a positive impact on the disaster safety awareness and enable effective safety management.

A Study on Risk Signal of Information Security and Organizational Learning Failure (정보보안 침해 위험신호의 조직학습 실패에 관한 시스템 다이나믹스적 연구)

  • 박성진
    • Journal of the Korea Society of Computer and Information
    • /
    • v.8 no.3
    • /
    • pp.179-187
    • /
    • 2003
  • This study investigate the reasons of organizational failure in detection and appropriate response to risk signal. The Crisis does not come true suddenly, there is some risk signals in crisis. If Organization detect the risk signals the crisis is come true opportunities, if not the crisis is come true disastrous outcome. This is use the system dynamics approach. System Dynamics assume the system as a collection of causal feedback loop, so we understand the dynamics around the problems. This investigate suggest that, the focus on growth is the a kind of promotional pressure and the pressure drive the organization to less attention the risk signal, so the risk is underestimate In proportion to real risk. Ultimate, the organization entrap the promotional climate and insensible to security. This study is a kind of hypothesis-discovering research, in the further study, the discovered hypothesis will be empirically tested.

  • PDF