Contributing Factors of Information Security Investments in South East Asia SMBs: A Technology-Organisational -Environment Approach

Authors:
Mathews Z. Nkhoma;Duy P. T. Dang
Affiliations:
Department of Business IT & Logistics, RMIT University Vietnam, Ho Chi Minh City, Vietnam;Department of Business IT & Logistics, RMIT University Vietnam, Ho Chi Minh City, Vietnam
Venue:
International Journal of Information Security and Privacy
Year:
2013

Citing 6
Cited 0

Issues and opinion on structural equation modeling

MIS Quarterly
The Role of External Influences on Organizational Information Security Practices: An Institutional Perspective

HICSS '06 Proceedings of the 39th Annual Hawaii International Conference on System Sciences - Volume 06
A trust-based consumer decision-making model in electronic commerce: The role of trust, perceived risk, and their antecedents

Decision Support Systems
A multitheoretical approach for solving trust problems in B2C e-commerce

International Journal of Networking and Virtual Organisations
Cloud Computing Security--Trends and Research Directions

SERVICES '11 Proceedings of the 2011 IEEE World Congress on Services
Cloud Computing: A Business and Economical Perspective

IJCSS '12 Proceedings of the 2012 International Joint Conference on Service Sciences

Quantified Score

Hi-index	0.00

Visualization

Abstract

This research aims to determine the contributing factors of information security investment by developing a theory-based conceptual model using Partial Least Square techniques to analyze the data collected from 500 IT decision-makers in Vietnamese small and medium sized businesses. The findings from the conceptual model, which is based on Technology-Organization-Environment framework, suggests that the drivers of organizational intention to invest in information security include the organization's internal information, size, perceived IT benefits and manager's knowledge about information security. By understanding more about the contributing factors of information security investment, practitioners could focus on such factors to make rational investment decision and improve their defense against the emerging cyber-crimes. On the other hand, the authors also hope to fill in the existing gap of information security management research area in which there are few studies investigating the drivers of information security investments.