IS CYBERSECURITY A TEAM SPORT? A MULTILEVEL EXAMINATION OF WORKGROUP INFORMATION SECURITY EFFECTIVENESS

成果类型:
Article
署名作者:
Yoo, Chul Woo; Goo, Jahyun; Rao, H. Raghav
署名单位:
State University System of Florida; Florida Atlantic University; University of Texas System; University of Texas at San Antonio
刊物名称:
MIS QUARTERLY
ISSN/ISSBN:
0276-7783
DOI:
10.25300/MISQ/2020/15477
发表日期:
2020
页码:
907-931
关键词:
collective efficacy systems security policy compliance COORDINATING EXPERTISE knowledge coordination protection motivation MODERATING ROLE fear appeals MODEL performance
摘要:
Organizations maintain their desired level of cybersecurity by evaluating the information security (ISec) effectiveness of their organizational units. Numerous ISec studies have delved into examining individual compliance, yet studies that develop an understanding about achieving the desired effect of the workgroup ISec have been scarce in the literature. Against this backdrop, this research note draws on the input-process-output framework to take a multilevel approach and examines how an individual security factor (individual self-efficacy) and two core workgroup mechanisms (workgroup collective efficacy and security knowledge coordination) can together affect workgroup information security effectiveness (WISE). Using a survey, data for the independent variables of the study was collected from 68 branch offices (with 536 employees in total) of a law enforcement agency in South Korea. Separately, for WISE, we obtained the branch offices' annual security assessment scores from the organization. The results reveal the cross-level nature of WISE, suggesting that group mechanisms significantly mediate the relationship between individual self-efficacy and WISE. The results support the view that group mechanisms are important in ISec management and need to be considered alongside the individual-level analysis in the pursuit of workgroup ISec performance. The findings provide insightful implications for both theory and practice.