본문 바로가기
  • Home

An Exploratory Study on the Information Security Culture Indicator

  • Informatization Policy
  • Abbr : 정보화정책
  • 2008, 15(3), pp.100-119
  • Publisher : NIA
  • Research Area : Social Science > Public Policy

이선중 1 이미정 2

1서울시립대학교
2(재)한국조달연구원

Accredited

ABSTRACT

The purpose of this paper is to develop the information security culture indicator. In this paper, we suggest that the information security indicator should be considered the attribute of culture than that of technology in the information security assessment for enhancing the information security capability. The concept of information security culture is reconstructed through the literature review and classified the dimension of Information Security Culture Indicator(ISCI) into three categories for measuring the information security. The ISCI consists of the measurement object, the person’s recognized level and the dimension for information security. The measurement object is divided into ‘Individual’, ‘Organization’and ‘Inter-organization’. The person’s recognized level is focused on‘ Understanding’,‘ Knowledge’and‘ Behavior’in the cognitive level. The dimension for information security falls into three categories of‘ Technology’,‘ Management’and‘ Institution’. 107 items of ISCI are developed by the experts’examination of the framework and indicator appropriateness. As a result, the framework for measuring information security and information security culture indicator is proposed from the perspective of culture.

Citation status

* References for papers published after 2023 are currently being built.