정보 보안 위협 통제 가능성과 정보 보안 정책 실행 능숙도가 정보 보안 정책 준수 행위 의도에 미치는 영향

• 영문명: The Impact of Information Security Threat Controllability and Information Security Policy Competence on Information Security Policy Compliance Behavioral Intention
• 발행기관: 한국IT서비스학회
• 저자명: 장재영(Jaeyoung Jang) 이석열(Sukyoul Lee) 김범수(Beomsoo Kim)
• 간행물 정보: 『한국IT서비스학회지』제24권 제2호, 99~115쪽, 전체 17쪽
• 주제분류: 경제경영 > 경영학
• 파일형태: PDF
• 발행일자: 2025.04.30

국문 초록

This study addresses the gaps of existing research on Information Security Policy (ISP) compliance by focusing on the role of individual capabilities. Organizations face significant challenges in ensuring ISP compliance, as compliance depends heavily on employees’ ability to perceive and execute security policies effectively. Using Social Cognitive Theory (SCT) as the theoretical foundation, this study examines the impact of Threat Control Ability (TCA) and Security Policy Competence (SPC) on ISP compliance awareness, attitude, and intention. Survey data collected from 319 respondents were analyzed to validate the proposed model. The findings indicate that both TCA and SPC positively influence ISP compliance intention but do not have a significant impact on ISP compliance attitude. TCA significantly affects ISP compliance awareness, while SPC does not, suggesting that TCA helps employees understand the necessity of compliance, whereas SPC focuses on facilitating the practical execution of policies. The study highlights the differentiated roles of TCA and SPC in the ISP compliance process, emphasizing the importance of addressing both “why” and “how” aspects of compliance.

목차

1. 서론

2. 선행연구 및 이론적 배경

3. 연구 모델 및 가설 설정

4. 연구 방법론 및 분석

5. 연구 토론

6. 시사점

7. 결론

참고문헌

키워드

Information Security Security Policy Information Security Policy Compliance Social Cognitive theory Employee Capabilities Threat Control Competence