종업원의 BYOD 보안 정책 준수 의도에 영향을 미치는 사회인지적 요인에 관한 연구

• Published in: 품질경영학회지 Vol. 52; no. 4; pp. 657 - 674
• Main Authors: 이창근, Lee Chang Geun, 유준우, Yoo Joon Woo, 박준성, Park Jun Sung, 조영주, Cho Young Ju, 유준영, Yoo Jun Young, 김소영, Kim So Young, 박희준, Park Hee Jun
• Format: Journal Article
• Language: English; Korean
• Published: 한국품질경영학회 31.12.2024
• Subjects: BYOD; Employees’ Behavior; Security Policy Compliance Intention; Social Cognitive Theory; Technology Threat Avoidance Theory; 학제간연구
• ISSN: 1229-1889; 2287-9005
• DOI: 10.7469/JKSQM.2024.52.4.657

Purpose: This study focuses on examining the social cognitive factors that influence employees' intentions to comply with security policies in a Bring Your Own Device (BYOD) environment, based on a model derived from Social Cognitive Theory. Additionally, it aims to propose managerial strategies to improve employees' adherence to BYOD security policies. Methods: To investigate employees' intentions to comply with BYOD security policies, we performed hypotheses testing within the proposed research model. A Partial Least Squares Structural Equation Modeling (PLS-SEM) analysis was employed to examine the collected data. The data was gathered from 268 employees working at companies that have adopted BYOD, through an online survey conducted between June 10 and 17, 2024. Results: The results confirmed all of our proposed hypotheses. Encouragement by others, the information security practices by others and instrumental support significantly influence both outcome expectations and self-efficacy. Additionally, instrumental support, outcome expectations, and self-efficacy are shown to affect employees' intentions to comply with BYOD security policies. Conclusion: Our study revealed that companies implementing BYOD should actively encourage employees to minimize security policy breaches by utilizing various support programs and sharing success stories of high performance resulting from adherence to the policies. This approach can effectively increase employees' intention to comply with BYOD information security policies.