• 한국정보시스템학회지:정보시스템연구
• /
• 제25권2호
• /
• pp.51-77
• /
• 2016

Purpose Organizations invest significant portions of their budgets in fortifying information security. Nevertheless, the security threats by employees are still at large. We discuss methods to reduce security threats that are posed by employees in organization. This study finds antecedent factors that increases or decreases employee's compliance intention. Also, the study suggests organizations' security environmental factors which influences the antecedent factors of compliance intention. Design/methodology/approach The structural equation model is then applied in order to verify this research model and hypothesis. Data were collected on 415 employees working in organizations with an implemented information security policy in South Korea. We analyzed the fitness and validity of the research model via confirmatory factor analysis in order to verify the research hypothesis, then we analyzed structural model, and derived the result. Findings The result shows that organizational commitment and peer behavior increase security compliance intention of employees, while security system anxiety decreases compliance intention. And, organization's physical security system and security communication both have influence on antecedent factors for information security compliance of employees. Our findings help organizations to establish information security strategies that enhance employee security compliance intention.

• 한국정보시스템학회지:정보시스템연구
• /
• 제27권4호
• /
• pp.97-114
• /
• 2018

Purpose Compliance support system (CSS) aims to support employees' voluntary compliance activities, however, it requires a different approach from the acceptance of other general information systems. In other words, the user's concern that his/her compliance activities recorded in the system are monitored may hinder the active use of the system. In this regard, we set up a research model to investigate the factors that affect the intention to use CSS, by including perceived usefulness, compliance commitment, and surveillance concern. Design/methodology/approach A questionnaire survey was conducted for the employees of a domestic oil-company, who operates their own CSS. Based on the 865 data collected, a structural model analysis using PLS was conducted. As a result, all four hypotheses were accepted. It was found that perceived usefulness of CSS has a positive effect on the intention to use CSS. Compliance commitment has a positive effect both on perceived usefulness and intention to use CSS. In contrast, surveillance concern of one's non-compliance recorded in the CSS was shown to have a negative effect on the relationship between compliance commitment and perceived usefulness. Findings This study has academic implications in that it extends the viewpoint of the existing technology acceptance mechanism by examining the two aspects, i.e., compliance commitment and surveillance concern. This study may also provide practical directions to strengthen the use of the active compliance support system by the employees.

• 한국전자거래학회지
• /
• 제21권4호
• /
• pp.95-117
• /
• 2016

최근 인구의 고령화 추세 및 웰빙에 대한 관심 증가는 헬스케어 서비스에 대한 수요의 증가로 이어지고 있다. 이러한 헬스케어 서비스는 지속적으로 사용자들이 해당 서비스를 이용하여 실제 건강을 증진시킬 수 있도록 돕는 것이 목적이다. 따라서 헬스케어 서비스의 효과성을 보다 증진시키기 위해서는 사용자가 헬스케어 서비스를 통해 추천되는 콘텐츠들에 대해 적극적으로 순응하고자 하는 의도를 가지고 행동을 취해야 한다. 하지만 기존의 헬스케어서비스에 관한 연구들은 순응의 서비스에 대한 지속사용의도에 대한 영향력을 살펴보는 연구들은 거의 없었다. 따라서 본 연구에서는 헬스케어 서비스의 지속적 사용의도에 사용자의 순응의도가 어떠한 영향을 미치지는 지를 기존의 의료정보학 및 정보시스템 분야의 이론을 기반으로 실증 검증하고자 한다. 이를 위해서 본 연구에서는 헬스케어 서비스에 대한 사용자의 순응의도(compliance intention)를 중심으로 지속사용의도에 영향을 미치는 요인을 검증하기 위한 모델을 제안하였고, 순응의도는 지속사용의도에 긍정적인 영향을 미치는 주요한 변수임을 확인하였다. 또한 순응의도를 높이는 변수들에 대해서도 검증하였다.

• 한국융합학회논문지
• /
• 제11권9호
• /
• pp.229-242
• /
• 2020

본 연구의 목적은 정보보안 준수의도에 영향을 주는 긍정적, 부정적 측면의 환경적 요인을 제시하고, 개인의 보안 준수의도와의 영향관계를 찾는 것이다. 연구대상은 정보보안 정책 및 기술을 적용하는 조직의 구성원들이며, 설문 조사를 통하여 유효표본을 확보하였다. 분석과정에서 구조방정식모델링을 통해 연구모델에 대한 검증을 하였다. 측정변수는 정보보안 정책, 정보보안 시스템, 정보보안 기술적 지원, 업무장애, 비가시성, 조직몰입, 준수의도로 구성하여 분석에 활용하였다. 결과는 보안 준수요인인 정책, 시스템, 기술적 지원과 미준수 요인인 업무 장애가 각각 조직몰입에 영향을 주었으며, 준수의도로 이어지는 것을 확인하였다. 연구 모델의 검증 결과를 토대로 조직의 정보보안 준수 수준 향상을 위한 구성원들의 보안 준수 전략 수립의 방향성을 제시하였다.

• 대한지역사회영양학회지
• /
• 제5권1호
• /
• pp.36-49
• /
• 2000

The purpose of the study was to find the sociopsychological factors predicting the intention of compliance with the dietary regimen in diabetes with a questionnaire. Data were collected from 282 adult noninsulin-dependent diabetics in Seoul, Kyoggida, and Kyongsangbukdo in Korea. Stepwise multiple regression analysis was conducted with predictor variables from theories of the Health Belief Model, Social Cognitive Model, The Theory of Reasoned Action , and Social Support. The behavioral intention of compliance with the prescribed diet was the independent variable. Subjects norm self-efficacy knowledge about diet therapy, outcome expectation, relationship with medical team, threat of deterioration of disease, and social support were the independent variables, The mean score of behavior intention was high ie 35.3 out to 42. Subjective norm and self-efficacy were the significant variables to predict the intention of dietary compliance. These variables comprised 39% of the common variance. To increase dietary compliance by influence of the referents and improve self-efficacy significant referents must be included and concrete and practical methods to follow the dietary regimen must be provided in nutrition education.

• Journal of Information Technology Applications and Management
• /
• 제22권2호
• /
• pp.171-199
• /
• 2015

This study proposes the practical information security measures that help IT personnel of banks comply the information security policy. The research model of the study is composed of independent variables (clarity and comprehensiveness of policy, penalty, dedicated security organization, audit, training and education program, and top management support), a dependent variable (information security policy compliance intention), and moderating variables (age and gender). Analyses results show that the information security measures except 'clarity of policy' and 'training and education program' are proven to affect the 'information security policy compliance intention.' In case of moderating variables, age moderated the relationship between top management support and compliance intention, but gender does not show any moderating effect at all. This study analyzes information security measures based solely on the perception of the respondents. Future study may introduce more objective measurement methods such as systematically analyzing the contents of the information security measures instead of asking the respondents' perception. In addition, this study analyzes intention of employees rather than the actual behavior. Future research may analyze the relationship between intention and actual behavior and the factors affecting the relationship.

• 한국정보시스템학회지:정보시스템연구
• /
• 제29권1호
• /
• pp.23-50
• /
• 2020

Purpose As information management grows in importance around the world, organizations are investing in information security technology. However, the higher the level of information security technology in an organization, the higher the techno-stress of employees. The purpose of this study is to suggest stress factors related to information security technology that affect the reduction of employees' intention to comply with information security and to suggest ways to alleviate stress. Design/methodology/approach The research presented a model for mitigating technical stress related to information security based on technical stress theory and person-organization fit theory. 346 questionnaire data were analyzed from the members of the organization who applied the information security technology, and the research hypothesis was verified through the structural equation modeling. Findings The hypothesis test confirms that security-related techno-stress reduces the information security compliance intention of employees, organizational technical support mitigates technical stress, and person-organization fitness mitigates the negative relationship between techno-stress and compliance intention. The results of the study contribute to the organization's strategy for minimizing the reduction of the information security compliance intention of employees, and are meaningful in that the theoretical basis for mitigating techno-stress is provided in the field of information security.

• 한국산업융합학회 논문집
• /
• 제24권4_2호
• /
• pp.421-434
• /
• 2021

The expansion of information sharing activities using online can increase the threat of information exposure by increasing the diversity of approaches to information within an organization. The purpose of this study is to present conditions for improving the information security compliance intention of insiders to improve the level of information security within the organization. In detail, the study applies the theory of planned behavior that clearly explains the cause of an individual's behavior and proposes a way to increase the compliance intention by integrating the social control theory and goal-setting theory. The study presented research models and hypotheses based on previous studies, collected samples by applying a questionnaire technique, and tested hypotheses through structural equation modeling. As a result, information security attitude, subjective norms, and self-efficacy had a positive influence on the intention to comply. Also, attachment, commitment, and involvement, which are the factors of social control theory, formed a positive attitude toward information security. Goal difficulty and goal specificity, which are the factors of goal setting theory, formed a positive self-efficacy. The study presents academic and practical implications in terms of suggesting a method of improving the information security compliance intention of employees.

• 디지털융복합연구
• /
• 제10권4호
• /
• pp.23-35
• /
• 2012

본 연구의 목적은 조직원들의 지속적인 정보보안 준수행위를 유도할 있는 요인을 규명하는 것이다. 이를 위해 기존연구에서 제시된 보안 대책인 보안인식교육과 보안정책을 선행요인으로 선정하였다. 연구결과 보안인식교육은 보안 정책과 정보보안 정책의 지속적 준수에 유의한 영향을 미치는 것으로 나타났다. 또한 정보보안 정책의 포괄성은 지속적 보안 정책준수 태도와 의도에 유의한 영향을 미치는 반면, 보안 정책의 간결성은 태도에만 유의한 영향을 미치는 것으로 나타났다.

• 한국산업정보학회논문지
• /
• 제26권3호
• /
• pp.23-39
• /
• 2021

정보보안에 대한 투자가 지속적으로 증가하고 있지만, 조직 내부의 보안 위협은 감소하지 않고 있다. 연구 목적은 조직원의 정보보안 준수의도를 높이기 위한 방향을 제시하는 것이다. 세부적으로, 연구는 정보보안 동기와 조직 신뢰가 정보보안 준수의도에 미치는 긍정적인 영향을 제시하고, 업무 향상초점의 조절효과를 확인한다. 연구 모델 및 가설 검증은 구조방정식 모델링을 통해 실시하며, 정량적 검증을 위하여 정보보안 정책을 도입한 조직의 조직원들에게 설문을 실시하였다. 가설 검증 결과, 정보보안 처벌, 가치 일치가 조직 신뢰를 통해 정보보안 준수의도에 긍정적 영향을 미치며, 업무 향상 초점이 처벌, 가치 일치, 조직 신뢰와 준수의도간의 영향 관계에 조절 효과가 있음을 확인하였다. 연구는 내부자의 정보보안 준수 수준 향상을 위한 조직의 노력 요인을 세부적으로 제시하였다는 측면에서 학술적, 실무적 시사점을 가진다.