An analysis on effects of information security investments: a BSC perspective

作者：Kong Hee Kyung; Kim Tae Sung^*; Kim Jungduk

来源：Journal of Intelligent Manufacturing, 2012, 23(4): 941-953.

DOI：10.1007/s10845-010-0402-7

• Information security investments
• Balanced score card (BSC)
• Empirical analysis
• Structural equation model (SEM)
• Critical success factors (CSF)
• Key performance indicators (KPI)

With the growing importance of information security due to the arrival of information society and the spread of the internet, information security is emerging as a tool to guarantee competitive advantage and is at the same time an indispensable requirement for stable business execution for companies and organizations. Additionally, the value of tangible and intangible assets that need to be protected as components of corporate assets are on the rise, where the importance of efficient and effective information asset management and information security investment is increasing for the organizations and companies managing them. However, despite an increase in the information security investment of an organization, there is a lack of systematic methodology pertaining to performance appraisals, which makes decision-making activities and determining means of improvement difficult. The existing financially focused information security investment is inadequate for systematic analyses and understanding due to the opportunity cost type characteristics of information security investment and the difficulty involved in presenting future strategic direction. This paper, considering the characteristics of the effects of information security investment, analyzes from a balanced score card perspective information security investment strategies and performance relationships. In short, critical success factors and key performance indicators are initially obtained from previous research related to information security investment, and the data collected through surveys at related companies and organizations are empirically analyzed utilizing the structural equation model.

• 出版日期2012-8