Institutional Influences on Information Systems Security Innovations

• 成果类型: Article
• 署名作者: Hsu, Carol; Lee, Jae-Nam; Straub, Detmar W.
• 署名单位: National Taiwan University; Korea University; University System of Georgia; Georgia State University
• 刊物名称: INFORMATION SYSTEMS RESEARCH
• ISSN/ISSBN: 1047-7047
• DOI: 10.1287/isre.1110.0393
• 发表日期: 2012
• 页码: 918-939
• 关键词: firm performance; diffusion; assimilation; PERSPECTIVE; MODEL; management; internet; adoption; DESIGN; IMPACT

摘要

This research investigates information security management as an administrative innovation. Although a number of institutional theories deal with information systems (IS) innovation in organizations, most of these institutional-centered frameworks overlook external economic efficiency and internal organizational capability in the presence of pressures of institutional conformity. Using Korea as the institutional setting, our research model posits that economic-based consideration will moderate the institutional conformity pressure on information security adoption while organization capability will influence the institutional confirmation of information security assimilation. The model is empirically tested using two-stage survey data from a field study of 140 organizations in Korea. The results indicate that in addition to institutional influences, our six proposed economic-based and organizational capability moderating variables all have significant influences on the degree of the adoption and assimilation of information security management. We conclude with implications for research in the area of organizational theory and the information security management literature, and for practices regarding how managers can factor into their information security planning the key implementation variables discovered in this study. The robust setting of the study in Korean firms allows us to generalize the theory to a new context and across cultures.