산업별 정보보안의 투자 수준과 관리 역량에 관한 연구 = A Study on the Investment Level and Administrative Competence of Information Security by Industry

다국어 초록 (Multilingual Abstract)

The purpose of this study is to examine what are the important variables for information security compliance and whether the information security investment by the industry is different. To comply with the information security policies, the organization must establish measures to prevent or resolve information security incidents. This research process consists of four stages, and the analysis method was conducted with the categorical regression analysis and the correspondence analysis. The first analysis analyzed the independent variables that affect security regulations compliance. The rest of the analysis was conducted by industry in the order of security compliance regulations, manpower investment, and budget investment. As a result of the first analysis, this had positive effects on an organization and personal information protection awareness, joint operation organization of information protection, manpower and budget investment, corporate size, and industry. The correspondence analysis was conducted from the second analysis to the fourth analysis and it analyzed the differences in information security investment by industry. The second analysis showed that the construction industry, science and technology industry, and finance industry have higher compliance with security regulations than other industries. The third analysis showed that the financial industry and the science and technology industry were higher than other industries. The last analysis showed that the financial industry was higher than other industries. The theoretical contribution of this study provided the basis for updating the information security theory. The practical contribution of this study requires government support to reduce information security deviations by industry.

참고문헌 (Reference)

• 1 "전자금융감독규정"
• 2 정병호 ; 김병초, "윤리 프로그램을 통한 비윤리적 정보공유 행동의 개선: 사회적 자본과 잔물결 효과" 한국디지털정책학회 15 (15): 169-182, 2017
• 3 "산업기술의 유출방지 및 보호에 관한 법률(약칭:산업기술보호법)"
• 4 "산업기밀보호센터"
• 5 정병호, "비윤리적 정보공유 딜레마와 사회적 네트워킹 관계에서 정보접근 모니터링의 영향력" (사)디지털산업정보학회 14 (14): 91-105, 2018
• 6 한국경제TV, "내부고발자 "테슬라, 개인정보 보호안 해""
• 7 이정환 ; 정병호 ; 김병초, "기업 보안 유형에 따른 보안사고 대응역량：사회기술시스템 이론 관점에서" 한국IT서비스학회 12 (12): 289-308, 2013
• 8 연합뉴스, "기술 경쟁 치열한데 또…삼성전자, '핵심자료 유출' 직원 해고"
• 9 정병호, "기밀정보 유출 경험을 가진 기업들의 정보사고 대응역량 강화에 관한 연구" (사)디지털산업정보학회 12 (12): 73-86, 2016
• 10 황인호, "개인의 대처 유형과 조직문화가 조직원의 정보보안에 미치는 영향" 한국산업정보학회 26 (26): 27-41, 2021
• 11 노형진, "SPSS에 의한 다변량 데이터의 통계분석" 효산출판사 2007
• 12 양경숙, "SPSS를 이용한 최적 범주형 자료분석" 한나래아카데미 2004
• 13 Mattord, Herbert, "Regulatory Compliance in Information Technology and Information Security" 2007
• 14 Siponen, M., "Neutralization: New insights into the problem of employee information systems security policy violations" 34 (34): 487-502, 2010
• 15 Hair, Joseph F, "Multivariate data analysis"
• 16 Hu, Qing, "Managing employee compliance with information security policies:the critical role of top management and organizational culture" 43 (43): 615-660, 2012
• 17 Merkow, Mark S, "Information security: Principles and practices" Pearson Education 2014
• 18 Bulgurcu, B., "Information security policy compliance: an empirical study of rationality-based beliefs and information security awareness" 34 (34): 523-548, 2010
• 19 Hone, K., "Information Security Policy: What do International Information Security Standards Say?" 21 (21): 402-409, 2002
• 20 Solms, B., "Information Security Management:The Second Generation" 15 (15): 281-288, 1996
• 21 NIST, "Information Security Handbook: A Guide for Managers"
• 22 Anderson, Evan E., "Enterprise information security strategies" 27 (27): 22-29, 2008
• 23 Hovav, A., "Applying an extended model of deterrence across cultures: An investigation of information systems misuse in the US and South Korea" 49 (49): 99-110, 2012
• 24 Baskerville, Richard, "An information security meta-policy for emergent organizations" 15 (15): 337-346, 2002
• 25 과학기술정보통신부, "2021년 정보보호 실태조사(기업)"
• 26 머니투데이, ""삼성전자, 직원들 챗GPT 사용 금지"…회사정보 유출 차단"