資訊安全有效性與高階管理團隊薪資差異關聯性探討之實證研究

Abstract

高階管理團隊在資訊安全領域中一直都扮演重要的角色，但過往資訊安全領域相關的研究卻只將他視為一個重要因素而未對於高階管理團隊如何去影響到資訊安全成效進行討論；在管理領域的文獻中，過往研究證實了高階管理團隊之間的薪資差異對於組織績效會有所影響，但是此一議題卻未應用於資訊安全的領域之中，高階管理團隊之間的薪資差異與組織資訊安全成效的關聯性並未探明，為了彌補此研究缺口，本研究探討了薪資差異如何影響到資訊安全成效，而研究結果證實了高階管理團隊之間薪資差異與資訊安全事件發生的可能性存在著正相關，也就是說高階管理團隊之間薪資差異的擴大會負向影響到組織的資訊安全成效，故本研究建議企業在分配高階管理團隊的薪資時應注意成員之間的薪資差距，以提升組織的資訊安全成效。

Top management team always plays a key role in information security management. While the past information security literature has highlighted its importance, little knowledge was available to understand the factors that might influence the process of top management decision making for the design and implementation of information security program in organizations. In the management literature, studies have shown that the pay disparities with top management teams can influence the firm performance, yet in the context of information security, it has not been clear on the relationship between the pay disparities with top management team and the effectiveness of information security in organizations. To address this research gap, this paper investigates how the pay disparities within top management team are associated with the effectiveness of information security. Our results demonstrate that the higher pay disparities with top management team could increase the possibility of breaches; it means that the higher pay disparities with top management team are negatively related to the effectiveness of information security. Our finding suggests the firm should consider the pay disparities with top management team in order to increase the effectiveness of information security in organizations.