기업 보안 유형에 따른 보안사고 대응역량 : 사회기술시스템 이론 관점에서

Incident Response Competence by The Security Types of Firms : Socio-Technical System Perspective

This study proceeded to examine the cause of the continuous secret information leakage in the firms. The purpose of this study is to find out what type of security among administrative, technological and physical security would have important influence on firm's security performance such as the security-incident response competence. We established the model that can empirically verify correlation between those three types of security and the security-incident response competence. In addition, We conducted another study to look at relation between developing department of security in the firms and reaction ability at the accidents. According to the study, the administrative security is more important about dealing with the security-incident response competence than the rest. Furthermore. a group with department of security has better the security-incident response competence and shows higher competence in fixing or rebui lding the damage. Therefore. this study demonstrates that investing in administrative security will be effective for the firm security.