The effect of the organizational approach in knowledge sharing on the performance of information security management
Subject Areas : Multimedia Processing, Communications Systems, Intelligent Systems
edris abbaszadeh
1
(
PhD. Student, Department of IT Management, Qazvin Branch, Islamic Azad University, Qazvin, Iran
)
mohamadreza sanaei
2
(
Assistant Professor, Department of IT Management, Qazvin Branch, Islamic Azad University, Qazvin, Iran
)
Reza Ehtesham Rasii
3
(
Assistant Professor, Department of Industrial Management, Qazvin Branch, Islamic Azad University, Qazvin, Iran
)
Keywords: Knowledge Sharing, education, Information security security function,
Abstract :
Introduction: The rapid movement of countries toward the information society has caused the vast growth of information systems and services and the emergence of a new type of organization called virtual organization, which are information-based organizations. Considering the role of information as a valuable commodity in these organizations, the existence of security risks and threats that arise in the virtual environment and through the Internet connection, it is necessary to protect this information and to achieve this The goal of every organization depends on its level of information requires the design of an information security management system so that it can identify and manage the threats that the organization is exposed to and protect its information assets against these attacks and the security of the organization's information. Continuously improving considering the importance of the role of current information in every organization, it seems vital to use information security management systems to set up, implement, control, check, maintain and improve information security.Method: This study filled the gap in previous writings by considering organizational methods in the study of information security management. A framework was developed based on the framework proposed in the recent work of Perez Gonzalez et al. This framework examined three organizational factors: information security knowledge sharing, observability, and science. In this study, Gonzalez's framework was modified to include two additional organizational factors: commitment and information security learning.Results: This study identifies the need for managers and decision-makers to consider the role of employees in information security. Managers can influence the levels of motivation, loyalty, and innovative risk-taking of their employees to create an ethical relationship in the organization.Discussion: This study investigated and analyzed the effects of information security organizational measures (information security knowledge sharing, learning, security observability, security training, and commitment in an organization) on the information security management performance of small and medium companies. The findings show that information security knowledge sharing, learning, and security observability have a significant effect on security performance. In addition, this study clarifies the importance of learning information security and recording acquired knowledge in the commitment of an organization. Regarding information security knowledge sharing, information security learning, and security observability, the results show their positive effect on the information security performance of small and medium companies.
_||_