The Journal of the Korea institute of electronic communication sciences (한국전자통신학회논문지)

Korea Institute of Electronic Communication Science (한국전자통신학회)
권호 표지
DOI QR코드

DOI QR Code

The Effect on the IS Psychological Empowerment on the Mitigation of IS Policy Resistance Through IS Role Stress: Focusing on the Moderation of IS Justice Climate

정보보안 심리적 권한이 업무 스트레스를 통해 정책 저항 완화에 미치는 영향: 공정성 분위기의 조절 효과

  • Hwang, In-Ho (College of General Education, Kookmin University)
  • Received : 2021.11.12
  • Accepted : 2022.02.17
  • Published : 2022.02.28
Download PDF
⟨ Previous Next ⟩

Abstract

An insider's information security incidents continue to occur, there is a growing demand for strengthening information security within the organization. However, when strict information security policies and rules are applied to employees of the organization, it can result as an information security stress and resistance behavior. The purpose of this study is to suggest the causes of insiders' negative information security behavior and factors that mitigate the cause. In particular, the study identifies how the mutual influence of individual (psychological empowerment) and organizational (justice climate) factors mitigates negative behavior. In this study, a sample was obtained by surveying workers of organizations that reflect information security policies to insiders, and hypothesis testing was performed by structural equation modeling. As a result of the analysis, role stress had a partial mediating effect on the effect of psychological empowerment on security policy resistance, and the justice climate strengthened the effect of psychological empowerment. Our results suggest a direction for reducing insider information security policy resistance, so it helps to establish a strategy for achieving internal information security goals.

내부자의 정보 노출 사고가 지속해서 발생하면서, 조직 내부의 정보보안 강화에 대한 요구가 높아지고 있다. 그러나 엄격한 정보보안 정책 및 규칙이 조직원에게 적용될 때 정보보안 스트레스와 저항 행동으로 나타날 수 있다. 본 연구는 내부자의 정보보안 정책의 부정적 행동 원인과 완화 요인을 제시하는 것을 목적으로 한다. 특히, 개인(심리적 권한) 및 조직(공정성 분위기) 요인이 어떻게 상호 영향을 주어 부정적 행동을 완화하는지를 확인하고자 하였다. 연구는 정보보안 정책을 내부자에게 반영하는 조직의 근로자에게 설문하여 표본을 확보했으며, 구조방정식모델링으로 가설검증을 하였다. 분석 결과, 정보보안 관련 심리적 권한이 정책 저항에 미치는 영향을 업무 스트레스가 부분 매개 효과를 가졌으며, 공정성 분위기가 심리적 권한의 영향을 강화하였다. 연구 결과는 내부자의 정보보안 정책 저항 감소를 위한 방향성을 제시하였으므로, 조직 내부의 보안 목표 달성을 위한 전략 수립에 도움을 준다.

Keywords

Acknowledgement

본 논문은 2020년 대한민국 교육부와 한국연구재단의 지원을 받아 수행된 연구임(NRF-2020S1A5A8040463)

References

  1. N. Papakonstantinou, D. L. Van Bossuyt, J. Linnosmaa, B. Hale, and B. O'Halloran, "A zero trust hybrid security and safety risk analysis method," J. of Computing and Information Science in Engineering, vol. 21, no. 5, 2021, pp. 050907. https://doi.org/10.1115/1.4050685
  2. Verizon, "2020 data breach investigations report," Report, 2020.
  3. W. Seo, "A study on the application of modularization technique to standard security policy to protect information assets and the securement of confidentiality and integrity," J. of the Korea Institute of Electronic Communication Sciences, vol. 14, no. 1, 2019, pp. 111-118. https://doi.org/10.13067/JKIECS.2019.14.1.111
  4. B. Bulgurcu, H. Cavusoglu, and I. Benbasat, "Information security policy compliance: An empirical study of rationality-based beliefs and information security awareness," MIS Quarterly, vol. 34, no. 3, 2010, pp. 523-548. https://doi.org/10.2307/25750690
  5. N. S. Safa, R. Von Solms, and S. Furnell, "Information security policy compliance model in organizations," Computers & Security, vol. 56, 2016, pp. 70-82. https://doi.org/10.1016/j.cose.2015.10.006
  6. Z. Ahmad, T. S. Ong, T. H. Liew, and M. Norhashim, "Security monitoring and information security assurance behaviour among employees: An empirical analysis," Information & Computer Security, vol. 27, no. 2, 2019, pp. 165-188. https://doi.org/10.1108/ics-10-2017-0073
  7. J. D'Arcy and P. L. Teh, "Predicting employee information security policy compliance on a daily basis: The interplay of security-related stress, emotions, and neutralization," Information & Management, vol. 56, no. 7, 2019, pp. 103151. https://doi.org/10.1016/j.im.2019.02.006
  8. J. D'Arcy, T. Herath, and M. K. Shoss, "Understanding employee responses to stressful information security requirements: A coping perspective," J. of Management Information Systems, vol. 31, no. 2, 2014, pp. 285-318. https://doi.org/10.2753/mis0742-1222310210
  9. I. Hwang and O. Cha, "Examining technostress creators and role stress as potential threats to employees' information security compliance," Computers in Human Behavior, vol. 81, 2018, pp. 282-293. https://doi.org/10.1016/j.chb.2017.12.022
  10. G. M. Spreitzer, "Psychological empowerment in the workplace: Dimensions, measurement, and validation," Academy of Management J., vol. 38, no. 5, 1995, pp. 1442-1465. https://doi.org/10.2307/256865
  11. A. Y. Zhang, L. J. Song, A. S. Tsui, and P. P. Fu, "Employee responses to employment relationship practices: The role of psychological empowerment and traditionality," J. of Organizational Behavior, vol. 35, no. 6, 2014, pp. 809-830. https://doi.org/10.1002/job.1929
  12. S. Oreg, "Personality, context, and resistance to organizational change," European J. of Work and Organizational Psychology, vol. 15, no. 1, 2006, pp. 73-101. https://doi.org/10.1080/13594320500451247
  13. Y. Bao, "Organizational resistance to performance enhancing technological innovations: A motivation threat ability framework," J. of Business & Industrial Marketing, vol. 24, no. 2, 2009, pp. 119-130. https://doi.org/10.1108/08858620910931730
  14. I. Hwang, "The influence on the information security techno-stress on security policy resistance through strain: Focusing on the moderation of task technology fit," J. of the Korea Institute of Electronic Communication Sciences, vol. 16, no. 5, 2021, pp. 931-939. https://doi.org/10.13067/JKIECS.2021.16.5.931
  15. M. J. Merhi and P. Ahluwalia, "Examining the impact of deterrence factors and norms on resistance to information systems security," Computers in Human Behavior, vol. 92, 2019, pp. 37-46. https://doi.org/10.1016/j.chb.2018.10.031
  16. I. Hwang, "The effect on psychological empowerment on IS compliance intention: Focusing on the moderating effect of trust and justice," J. of Digital Contents Society, vol. 22, no. 10, 2021, pp. 1683-1694. https://doi.org/10.9728/dcs.2021.22.10.1683
  17. A. Ergeneli, G. S. Ari, and S. Metin, "Psychological empowerment and its relationship to trust in immediate managers," J. of Business Research, vol. 60, no. 1, 2007, pp. 41-49. https://doi.org/10.1016/j.jbusres.2006.09.012
  18. Y. Chung, "Workplace ostracism and workplace behaviors: A moderated mediation model of perceived stress and psychological empowerment," Anxiety, Stress, & Coping, vol. 31, no. 3, 2018, pp. 304-317. https://doi.org/10.1080/10615806.2018.1424835
  19. R. Ayyagari, V. Grover, and R. Purvis, "Technostress: Technological antecedents and implications," MIS Quarterly, vol. 35, no. 4, 2011, pp. 831-858. https://doi.org/10.2307/41409963
  20. M. Tarafdar, Q. Tu, B. S. Ragu-Nathan, and T. S. Ragu-Nathan, "The impact of technostress on role stress and productivity," J. of Management Information Systems, vol. 24, no. 1, 2007, pp. 301-328. https://doi.org/10.2753/MIS0742-1222240109
  21. P. S. Galluch, V. Grover, and J. B. Thatcher, "Interrupting the workplace: Examining stressors in an information technology context," J. of the Association for Information Systems, vol. 16, no. 1, 2015, pp. 1-47. https://doi.org/10.17705/1jais.00387
  22. J. A. Colquitt, R. A. Noe, and C. L. Jackson, "Justice in teams: Antecedents and consequences of procedural justice climate," Personnel Psychology, vol. 55, no. 1, 2002, pp. 83-109. https://doi.org/10.1111/j.1744-6570.2002.tb00104.x
  23. M. L. Ambrose and M. Schminke, "The role of overall justice judgments in organizational justice research: A test of mediation," J. of Applied Psychology, vol. 94, no. 2, 2009, pp. 491-500. https://doi.org/10.1037/a0013203
  24. F. O. Walumbwa, C. A. Hartnell, and A. Oke, "Servant leadership, procedural justice climate, service climate, employee attitudes, and organizational citizenship behavior: A cross-level investigation," J. of Applied Psychology, vol. 95, no. 3, 2010, pp. 517-529. https://doi.org/10.1037/a0018867
  25. M. A. Thornton and D. E. Rupp, "The joint effects of justice climate, group moral identity, and corporate social responsibility on the prosocial and deviant behaviors of groups," J. of Business Ethics, vol. 137, no. 4, 2016, pp. 677-697. https://doi.org/10.1007/s10551-015-2748-4
  26. M. M. Azeem, M. Abrar, M. Bashir, and A. Zubair, "Impact of organizational justice and psychological empowerment on perceived organizational performance: The mediating role of organizational citizenship behavior," American J. of Industrial and Business Management, vol. 5, no. 5, 2015, pp. 272-280. https://doi.org/10.4236/ajibm.2015.55029
  27. G. Dhillon, Y. Y. Abdul Talib, and W. N. Picoto, "The mediating role of psychological empowerment in information security compliance intentions," J. of the Association for Information Systems, vol. 21, no. 1, 2020, pp. 152-174.
  28. J. Bester, M. W. Stander, and L. E. Van Zyl, "Leadership empowering behaviour, psychological empowerment, organisational citizenship behaviours and turnover intention in a manufacturing division," SA J. of Industrial Psychology, vol. 41, no. 1, 2015, pp. 1-14.
  29. C. E. Chung and S. Kowalski, "Job stress, mentoring, psychological empowerment, and job satisfaction among nursing faculty," J. of Nursing Education, vol. 51, no. 7, 2012, pp. 381-388. https://doi.org/10.3928/01484834-20120509-03
  30. O. Oyeleye, P. Hanson, N. O'Connor, and D. Dunn, "Relationship of workplace incivility, stress, and burnout on nurses' turnover intentions and psychological empowerment," JONA: The J. of Nursing Administration, vol. 43, no. 10, 2013, pp. 536-542. https://doi.org/10.1097/nna.0b013e3182a3e8c9
  31. N. Tripathi and M. Bharadwaja, "Psychological empowerment and stress: Role of personality and power distance," J. of Indian Business Research, vol. 11, no. 3, 2019, pp. 281-298. https://doi.org/10.1108/jibr-06-2018-0163
  32. J. C. Nunnally, Psychometric theory (2nd ed.). New York: McGraw-Hill, 1978.
  33. C. Fornell and D. F. Larcker, "Evaluating structural equation models with unobservable variables and measurement error," Journal of Marketing Research, vol. 18, no. 1, 1981, pp. 39-50. https://doi.org/10.2307/3151312
  34. P. M. Podsakoff, S. B. MacKenzie, J. Lee, and N. P. Podsakoff, "Common method biases in behavioral research: A critical review of the literature and recommended remedies," Journal of Applied Psychology, vol. 88, no. 5, 2003, pp. 879-903. https://doi.org/10.1037/0021-9010.88.5.879
  35. R. H. Hoyle and D. A. Kenny, "Sample size, reliability, and tests of statistical mediation," Statistical Strategies for Small Sample Research, vol. 1, 1999, pp. 195-222.
  36. G. C. Lin, Z. Wen, H. W. Marsh, and H. S. Lin, "Structural equation models of latent interactions: Clarification of orthogonalizing and double-mean-centering strategies," Structural Equation Modeling, vol. 17, no. 3, 2010, pp. 374-391. https://doi.org/10.1080/10705511.2010.488999