earticle

영어

Most of business activities are performed on the basis of information assets in cyberspace. However, assets are exposed to threats that cause information security incidents. In order to cope with increasing security incidents, companies has invested to information security measures such as policies and procedures, access control mechanisms, anti-virus software, encryption, digital signatures, monitoring and analysis tools, backup copies of information, and security awareness and training programs. Nonetheless, security incidents have significantly increased. The objective of this paper is to investigate the relationship between information security measures and security incidents that decrease production efficiency. For this purpose, this study analyzes a survey data from finance and insurance companies by using negative binomial regression model. Our results could be utilized to establish a guideline about which security measures should be improved to reduce security incident.