探討影響資訊安全管理系統擴散的決定因素

Investigating the Determinants of Information Security Management Systems Diffusion

許瑋麟(Wei-Lin Hsu) ； 郭仁宗(Ren-Chung Kuo) ； 何玉菁(Yu-Ching Ho) ； 賴志明(Jhih-Ming Lai)

《慈濟科技大學學報》 2期=總26 (2016/03) Pp. 77-95

摘要

由於資訊科技及網際網路的蓬勃發展，資訊安全管理儼然是目前企業最重要的研究議題之一，特別是目前已有許多企業已導入資訊安全標準(例如BS7799 or ISO27001)並建置資訊安全管理系統(information security management systems, ISMS)，以達成資訊安全管理目標。本研究以科技－組織－環境(Technology- Organization-Environment, TOE)架構探討影響資訊安全管理系統擴散的決定因素，研究發現在科技構面中有兩項因素(科技準備能力、ISMS相容性)、組織構面中有兩項因素(公司規模、ISMS與公司策略的配適度)、環境構面中有一項因素(夥伴影響)對ISMS擴散程度有非常正向著的影響。本研究的發現可以提供已導入或正準備導入ISMS的企業參考，以期能順利成功的導入ISMS並進一步為企業提升資訊安全管理的效益與成效。

關鍵字

資訊安全管理 ； 資訊安全管理系統 ； 科技－組織－環境架構

並列摘要

As information technology and Internet are rapid developed and widely used, information security management becomes one of the most important research issues to business, especially now there are many companies implement information security management systems (ISMS), e.g. BS7799 or ISO27001, to maintain their information assets safety with confidentiality、integrity、availability. The aim of this research is to investigating the determinants of ISMS diffusion from the Technology- Organization- Environment (TOE) viewpoint. The finding results show that two factors (technology readiness and compatibility) in technology dimension; two factors (company size and ISMS strategy fit organization strategy) in organization dimension, and on factor in environment dimension (partner influence) significantly influence the ISMS diffusion. These findings could provide valuable determinants to those enterprises which are planning to introduce and implement ISMS. Taking these determinants into account, it is expected that enterprises will successfully implement ISMS and gain their benefits and advantages.

並列關鍵字

Information Security Management ； Information Security Management Systems (ISMS) ； Technology–Organization-Environment (TOE) framework

參考文獻

Bose, R. and X. Luo (2011). "Integrative framework for assessing firms’ potential to undertake Green IT initiatives via virtualization – A theoretical perspective." Journal of Strategic Information Systems 20: 38-54.

Broderick, J. S. (2006). "ISMS, Security standards and security regulations." Information Security Technical Report 11(1): 26-31.

Chang, I., Hwang, H., Hung, M., Lin, M. and D.C. Yen (2007). "Factors affecting the adoption of electronic signature: executives' perspective of hospital information department." Decision Support Systems 44: 350-359.

Chang, I.C., Hwang, H.G., Yen, D.C. and J.W. Lian (2006). "Critical factors for adopting PACS in Taiwan: Views of radiology department directors." Decision Support Systems 42: 1042–1053.

Chang, S. E. and C. B. Ho (2006). "Organizational factors to the effectiveness of implementing information security management." Industrial Management and Data Systems 106(3): 345-361.