Improving Information Security Performance: The Role of Management Support and Security Operation Center

Abstract

The implementation of Information Technology (IT) in any aspects of business has change the landscape of business. Specifically, IT has made significant and major changes in banking industry, especially on the way people do business with bank. Beside as business enabler, IT now become a major tool for bank to win the competition. With the strategic role of IT in banking industry, there is a risk from security point of view. The new sophisticated and advanced kind of attack drive to higher impact for banks. Beside direct loss caused by successful attack, there is also loss caused by image damage and sanction from regulatory. With many initiatives can be done to improve Information Security condition, banking need to prioritize the initiative that has most significant impact. Management support on information security is cited by many literatures as basic requirement for improving Information Security condition. Security Operation Center also proposed as initiatives to enhance the capability of detection and response to attack. This research tries to empirically find out the impact of Management Support to information security performance and the role of Security Operation Center on mediating both variables. Data are gathered from banks in Indonesia using survey methodology through questionnaire answered by qualified respondents. The sample design used is a probability sample with disproportionate stratified random sampling and analyzed using Structural Equation Modeling -Partial Least Square. This paper shows that management support has significant impact on improving Information Security condition in banking industry. It also concludes that SOC has complimentary mediation of relationship between management support and information security performance. Practically, result of this research can be foundation for company that wants to focus on factors that significantly impact security performance, while theoretically confirmed previous studies on the role of management support.

Building a thematic framework of cybersecurity: a systematic literature review approach

“…, 2022; Loonam et al. , 2022) and has a noteworthy influence on a company’s information security performance (Mukundan and Prakash Sai, 2014; Atmojo et al. , 2019; Ključnikov et al.…”

“…Cyber threats are highly impacted by senior management (Shillair et al, 2022). Empirical evidence suggests that top management support reduces the impact of institutional pressures on the organization's overall cybersecurity strategy (Ogbanufe et al, 2021), increases cybersecurity maturity (Kumar et al, 2021;Heymann et al, 2022;Loonam et al, 2022) and has a noteworthy influence on a company's information security performance (Mukundan and Prakash Sai, 2014;Atmojo et al, 2019;Klju cnikov et al, 2019;Shaikh and Siponen, 2023). Leadership, JSIT 26,2 including transformational leadership (Loonam et al, 2022;Trim and Lee, 2022) and ethical leadership (Wang and Xu, 2021), plays an active role in institutionalizing security processes and creating a supportive structure to enhance the development and application of cognitive understanding in cybersecurity management (Onumo et al, 2021).…”

Outsource or not? An AHP Based Decision Model for Information Security Management

“…maturity and encourage appropriate financial and infrastructure support for the program (Atmojo et al, 2019). The aforementioned criteria that were deemed most important focus on the IS performance rather than on the predispositions that need to be met for an efficient approach.…”