Organizational factors to the effectiveness of implementing information security management

Abstract

Purpose - This paper aims to examine the influence of organization factors on the effectiveness of implementing BS7799, an information security management (ISM) standard. Design/methodology/approach - Based on literature review, a research model was formulated by extracting the antecedents of ISM, and an empirical study was conducted to show how the organizational factors influence organizations in carrying out BS7799. Findings - The study result revealed that there were significant impacts of organizational factors, including IT competence of business managers, environment uncertainty, industry type, and organization size, on the effectiveness of implementing ISM. Research limitations/implications - The sample is limited to the organizational factors m Taiwan. It is suggested to replicate this study in other countries to reconfirm the result before adopting its general implications. Owing to the highly intrusive nature of ISM surveys, a cautious approach with rapport and trust is a key success factor in conducting empirical studies on ISM. Practical implications - IT competence is conducive to ISM implementation through subjective norms, leadership, belief, and behavior of ISM activities. Environmental uncertainty positively influences the need for greater innovation, which increases the dependence on IT, and therefore makes the effectiveness of ISM more desirable. Companies in an industry sensitive to security threats should pay more attentions to ISM practice. Corporate executives should also realize the size difference for adopting appropriate ISM strategies. Originality/value - A research model was proposed to study the impacts of organizational factors on ISM, after a broad survey on related researches. The validated model and its corresponding study results can be referenced by enterprise managers and decision makers to make favorable tactics for achieving their goals of ISM

Information system security commitment: A study of external influences on senior management

“…Management's IT competence and environmental uncertainty in industries positively influence organizational ISS management (Chang & Ho, 2006). Business managers with greater IT competence assume stronger ISS management leadership roles and demonstrate greater confidence in ISS management (Chang & Ho, 2006).…”

“…Environmental uncertainty increases competition within industries, driving IS innovation and increasing dependence on information systems (Chang & Ho, 2006;Kearns & Lederer, 2004). Hsu et al (2012) found different factors influenced adoption and assimilation of ISS management.…”

“…Senior management commitment is demonstrated by committing resources to ISS (Johnson, 2009;Lee & Larsen, 2009), assigning roles and responsibilities for ISS (Dhillon, Tejay, & Hong, 2007;McFadzean et al, 2006;Patnayakuni & Patnayakuni, 2014), communicating the ISS vision (Cho, Park, & Michel, 2011;McFadzean et al, 2006;Patnayakuni & Patnayakuni, 2014;Seeholzer, 2012;von Solms & von Solms, 2006a) and monitoring compliance (Herath & Rao, 2009a;McFadzean et al, 2006). However, research also shows senior managers often lack commitment to ISS (Chang & Ho, 2006;Hsu, 2009;Hu et al, 2007;Smith et al, 2010).…”

“…SMEs are often faced with greater resource constraints and lack ISS expertise, training, and education (Thong, 1999). Prior IS and ISS research has found regulatory requirements, customer expectations, supplier expectations, and ISS assimilation varies by industry (Chang & Ho, 2006;Kearns & Lederer, 2004). Therefore, examining multiple industries provided a better understanding of the relationships between external influences, senior management beliefs and participation in ISS, and ISS assimilation within organizations.…”

“…Senior managers often lack commitment to or sufficient awareness of ISS (Chang & Ho, 2006;Hsu, 2009;Hu et al, 2007;Smith, Winchester, Bunker, & Jamieson, 2010), but can be motivated to support ISS by internal or external influences (Hu et al, 2007).…”