An impact of information security investment on information security incidents: A case of Korean organizations

Hansol Lee; Eunkyung Kwon; Kyeongwon Yoo; Sangmi Chai

doi:10.1145/2971603.2971644

An impact of information security investment on information security incidents: A case of Korean organizations

Hansol Lee, Eunkyung Kwon, Kyeongwon Yoo, Sangmi Chai

Division of Business Administration

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

1 Scopus citations

Abstract

Information security incidents are serious threats for a modern business environment. Firms believe that an investment on information security contribute to firms avoiding security incidents. However, there is a little research on economic outcomes of information security investment. This research investigates the relationship between information security investments and the number of information security incidents. This study empirically investigates how the information security related investment could reduce the possibility of information security incidents. Based on survey data, this study explores an impact of information security investment on information security incidents. This research explores the factors; an investment on information security, top management support, and Employees' information security awareness, contributing on firms' information security breaches. Based on Poisson regression model, we expect to figure out a positive impact of firm's information security investment on reducing the number of information security incidents. In addition, we expect to find out the impact of support of top management and employees' information security awareness.

Original language	English
Title of host publication	Proceedings of the 18th Annual International Conference on Electronic Commerce
Subtitle of host publication	e-Commerce in Smart connected World, ICEC 2016
Publisher	Association for Computing Machinery
ISBN (Electronic)	9781450342223
DOIs	https://doi.org/10.1145/2971603.2971644
State	Published - 17 Aug 2016
Event	18th International Conference on Electronic Commerce, ICEC 2016 - Suwon, Korea, Republic of Duration: 17 Aug 2016 → 19 Aug 2016

Publication series

Name	ACM International Conference Proceeding Series
Volume	17-19-August-2016

Conference

Conference	18th International Conference on Electronic Commerce, ICEC 2016
Country/Territory	Korea, Republic of
City	Suwon
Period	17/08/16 → 19/08/16

Bibliographical note

Publisher Copyright:
© 2016 ACM.

Keywords

Employees' information security awareness
Information security incidents
Investment of information security
Poisson regression model
Top management's support

Access to Document

10.1145/2971603.2971644

Cite this

Lee, H., Kwon, E., Yoo, K., & Chai, S. (2016). An impact of information security investment on information security incidents: A case of Korean organizations. In Proceedings of the 18th Annual International Conference on Electronic Commerce: e-Commerce in Smart connected World, ICEC 2016 Article 2971644 (ACM International Conference Proceeding Series; Vol. 17-19-August-2016). Association for Computing Machinery. https://doi.org/10.1145/2971603.2971644

Lee, Hansol ; Kwon, Eunkyung ; Yoo, Kyeongwon et al. / An impact of information security investment on information security incidents : A case of Korean organizations. Proceedings of the 18th Annual International Conference on Electronic Commerce: e-Commerce in Smart connected World, ICEC 2016. Association for Computing Machinery, 2016. (ACM International Conference Proceeding Series).

@inproceedings{582809f9b72343a6a7da2dde3f312781,

title = "An impact of information security investment on information security incidents: A case of Korean organizations",

abstract = "Information security incidents are serious threats for a modern business environment. Firms believe that an investment on information security contribute to firms avoiding security incidents. However, there is a little research on economic outcomes of information security investment. This research investigates the relationship between information security investments and the number of information security incidents. This study empirically investigates how the information security related investment could reduce the possibility of information security incidents. Based on survey data, this study explores an impact of information security investment on information security incidents. This research explores the factors; an investment on information security, top management support, and Employees' information security awareness, contributing on firms' information security breaches. Based on Poisson regression model, we expect to figure out a positive impact of firm's information security investment on reducing the number of information security incidents. In addition, we expect to find out the impact of support of top management and employees' information security awareness.",

keywords = "Employees' information security awareness, Information security incidents, Investment of information security, Poisson regression model, Top management's support",

author = "Hansol Lee and Eunkyung Kwon and Kyeongwon Yoo and Sangmi Chai",

note = "Publisher Copyright: {\textcopyright} 2016 ACM.; 18th International Conference on Electronic Commerce, ICEC 2016 ; Conference date: 17-08-2016 Through 19-08-2016",

year = "2016",

month = aug,

day = "17",

doi = "10.1145/2971603.2971644",

language = "English",

series = "ACM International Conference Proceeding Series",

publisher = "Association for Computing Machinery",

booktitle = "Proceedings of the 18th Annual International Conference on Electronic Commerce",

}

Lee, H, Kwon, E, Yoo, K & Chai, S 2016, An impact of information security investment on information security incidents: A case of Korean organizations. in Proceedings of the 18th Annual International Conference on Electronic Commerce: e-Commerce in Smart connected World, ICEC 2016., 2971644, ACM International Conference Proceeding Series, vol. 17-19-August-2016, Association for Computing Machinery, 18th International Conference on Electronic Commerce, ICEC 2016, Suwon, Korea, Republic of, 17/08/16. https://doi.org/10.1145/2971603.2971644

An impact of information security investment on information security incidents: A case of Korean organizations. / Lee, Hansol; Kwon, Eunkyung; Yoo, Kyeongwon et al.
Proceedings of the 18th Annual International Conference on Electronic Commerce: e-Commerce in Smart connected World, ICEC 2016. Association for Computing Machinery, 2016. 2971644 (ACM International Conference Proceeding Series; Vol. 17-19-August-2016).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - An impact of information security investment on information security incidents

T2 - 18th International Conference on Electronic Commerce, ICEC 2016

AU - Lee, Hansol

AU - Kwon, Eunkyung

AU - Yoo, Kyeongwon

AU - Chai, Sangmi

PY - 2016/8/17

Y1 - 2016/8/17

N2 - Information security incidents are serious threats for a modern business environment. Firms believe that an investment on information security contribute to firms avoiding security incidents. However, there is a little research on economic outcomes of information security investment. This research investigates the relationship between information security investments and the number of information security incidents. This study empirically investigates how the information security related investment could reduce the possibility of information security incidents. Based on survey data, this study explores an impact of information security investment on information security incidents. This research explores the factors; an investment on information security, top management support, and Employees' information security awareness, contributing on firms' information security breaches. Based on Poisson regression model, we expect to figure out a positive impact of firm's information security investment on reducing the number of information security incidents. In addition, we expect to find out the impact of support of top management and employees' information security awareness.

AB - Information security incidents are serious threats for a modern business environment. Firms believe that an investment on information security contribute to firms avoiding security incidents. However, there is a little research on economic outcomes of information security investment. This research investigates the relationship between information security investments and the number of information security incidents. This study empirically investigates how the information security related investment could reduce the possibility of information security incidents. Based on survey data, this study explores an impact of information security investment on information security incidents. This research explores the factors; an investment on information security, top management support, and Employees' information security awareness, contributing on firms' information security breaches. Based on Poisson regression model, we expect to figure out a positive impact of firm's information security investment on reducing the number of information security incidents. In addition, we expect to find out the impact of support of top management and employees' information security awareness.

KW - Employees' information security awareness

KW - Information security incidents

KW - Investment of information security

KW - Poisson regression model

KW - Top management's support

UR - http://www.scopus.com/inward/record.url?scp=84988712023&partnerID=8YFLogxK

U2 - 10.1145/2971603.2971644

DO - 10.1145/2971603.2971644

M3 - Conference contribution

AN - SCOPUS:84988712023

T3 - ACM International Conference Proceeding Series

BT - Proceedings of the 18th Annual International Conference on Electronic Commerce

PB - Association for Computing Machinery

Y2 - 17 August 2016 through 19 August 2016

ER -

Lee H, Kwon E, Yoo K, Chai S. An impact of information security investment on information security incidents: A case of Korean organizations. In Proceedings of the 18th Annual International Conference on Electronic Commerce: e-Commerce in Smart connected World, ICEC 2016. Association for Computing Machinery. 2016. 2971644. (ACM International Conference Proceeding Series). doi: 10.1145/2971603.2971644

An impact of information security investment on information security incidents: A case of Korean organizations

Abstract

Publication series

Conference

Bibliographical note

Keywords

Access to Document

Fingerprint

Cite this