An impact of information security investment on information security incidents: A case of Korean organizations

Abstract

Information security incidents are serious threats for a modern business environment. Firms believe that an investment on information security contribute to firms avoiding security incidents. However, there is a little research on economic outcomes of information security investment. This research investigates the relationship between information security investments and the number of information security incidents. This study empirically investigates how the information security related investment could reduce the possibility of information security incidents. Based on survey data, this study explores an impact of information security investment on information security incidents. This research explores the factors; an investment on information security, top management support, and Employees' information security awareness, contributing on firms' information security breaches. Based on Poisson regression model, we expect to figure out a positive impact of firm's information security investment on reducing the number of information security incidents. In addition, we expect to find out the impact of support of top management and employees' information security awareness. © 2016 ACM.