從社會資本觀點探討員工組織承諾與資訊安全行為意圖

Encouraging information security behavioral intentions: A social capital perspective

胡淯婷(Yu-Ting Hu)

指導教授 ： 施盛寶

淡江大學/管理學院/資訊管理學系碩士班/碩士(2012年)

https://doi.org/10.6846/TKU.2012.01160

摘要

在資訊科技日益茁壯的環境下，資訊安全的重要性變得不可或缺，使得資訊系統的安全管理變得極為重要，長期以來組織一直使用安全技術來防範資訊安全威脅，但卻仍常發生資安的問題，因此，組織內使用者的資訊安全行為在資訊安全的研究上也獲得越來越多的關注，雖然組織訂定了資訊安全相關的政策規範，但是來自組織內部人員資訊安全的威脅卻一直存在，歸究其原因，儘管資訊安全行為的研究中，個人的行為已被認為是組織內的一個重要環節，卻仍缺乏關注社會因素的研究，社會資本常與社會影響及社會規範作為相關的概念進行探討，可視為社會因素的一種。因此，本研究透過社會資本的概念，來探討其是否能有效的提高員工的組織承諾，進而對資訊安全行為意圖有正向的影響。研究對象選自天下雜誌2011年500大服務業的企業，針對公司內部的資訊員工進行抽樣調查。研究結果發現結構性社會資本對於員工的組織承諾有顯著的影響，而員工的關係性及認知性社會資本也能夠影響員工組織承諾中的認同及內化，當員工的組織承諾越高，越能正向影響員工資訊安全行為的意圖。本研究認為公司應善加管理組織內的社會資本來強化員工對組織的承諾從而增加員工的資訊安全行為，避免組織陷於資訊安全的威脅中。

關鍵字

社會資本 ； 社會影響 ； 組織承諾 ； 資訊安全行為意圖

並列摘要

Along with the rapid development of information technology, the importance of information security has been indispensable, and the information system security management also has become extremely important. For a long time, organizations have been using security technology techniques to prevent information security threats, however, information security problems still occur. Therefore, the end users security behavior in the organization is getting more and more attention. Despite an acknowledgment of the importance of individual security behavior and the recent interests in behavioral security research, less attention has been paid to social factors. Social capital can be a kind of social factors, and was often discussed as the concepts with social capital, social influence and social norms. Draw on this, the study adopted the theoretical background of social capital to explore the effectiveness of the improvement of employees' organizational commitment, and eventually the effects on information security behavior intention. We collected 168 samples from IT professionals work in Taiwan based on the list of CommonWealth magazine in 2011. The results showed that structural social capital has positive effects on organizational commitment (i.e. compliance, identification, and internalization). Relational social capital and cognitive social capital have positive effects on identification and internalization. Organizational commitment enhanced information security behavior intention. This study concluded that organizations should manage the social capital to strengthen employees’ commitment and information security behavior. Academic and practical implications were also provide in this study.

並列關鍵字

Social capital ； Social influence ； Organizational commitment ； Information security behavioral intention

參考文獻

1. Adler, P.S., and Kwon, S.W. 2002. "Social Capital: Prospects for a New Concept," Academy of management review (27:1), pp 17-40.

2. Ajzen, I. 1991. "The Theory of Planned Behavior," Organizational Behavior and Human Decision Processes (50:2), pp 179-211.

3. Anderson, C.L., and Agarwal, R. 2010. "Practicing Safe Computing: A Multimedia Empirical Examination of Home Computer User Security Behavioral Intentions," MIS Quarterly (34:3), pp 613-643.

4. Ashforth, B.E., and Mael, F. 1989. "Social Identity Theory and the Organization," Academy of Management Review (14:1), pp 20-39.

5. Aycan, Z. 2000. "Cross-Cultural Industrial and Organizational Psychology," Journal of Cross-Cultural Psychology (31:1), pp 110-128.