摘要
本文以国内通过信息安全管理体系认证的中国企业为研究对象,利用2个问卷和相关档案数据,运用PLS-SEM方法,探讨了制度压力(包括强制压力、模仿压力和规范压力)对信息安全合法化过程(包括制度履行和制度内化)的影响,以及信息安全合法化与组织绩效(包括竞争优势、经济效益和运维效率)之间的关系。结果表明,强制压力、模仿压力和规范压力对制度履行存在不同程度的显著正向影响,但对制度内化的影响则呈现较大的差异,其中只有强制压力对内化影响显著。同时发现,履行过程对竞争优势和经济效益存在正向影响,内化过程对运维效率存在正向影响,对竞争优势和经济效益影响则不显著。本研究结论为国家主管机构制定信息安全监管政策提供了理论基础和政策建议,也为企业开展信息安全活动提供了决策依据。
Information security has received unprecedented attention, but the existing researches mostly focus on employee's information security policy compliance and other individual-level analysis studies. Exploiting two types of questionnaires and archival data, we used 148 Chinese enterprises with information security management system certification as the sample to explore effects of institutional pressures(including coercive pressure, mimetic pressure and normative pressure) on information security legitimation process(including implementation and internalization), and relationships between information security legitimation and organizational performance(including operational efficiency, economic benefit and competitive advantage). The results are shown that coercive pressure, mimetic pressure and normative pressure all have significant positive impacts on implementation, but only coercive pressure has a significant positive influence on internalization. We are also noted that implementation has significant positive impact on economic benefit and competitive advantage. Internalization only has significant positive impact on operational efficiency. Our findings provide theoretical basis and policy proposal to authority formulating information security regulation and can be utilized in institutionalization of information security.
出处
《管理世界》
CSSCI
北大核心
2016年第2期112-127,188,共16页
Journal of Management World
基金
国家自然科学基金重点课题(项目编号:71132001)
国家自然科学基金课题(项目编号:70972085)的资助
