Institutional pressures in security management: Direct and indirect influences on organizational investment in information security control resources
Authors: Cavusoglu, Huseyin; Cavusoglu, Hasan; Son, Jai-Yeol; Benbasat, Izak
Journal: Information & Management (2015)
To offer theoretical explanations of why differences exist in the level of information security contro resources (ISCR) among organizations, we develop a research model by applying insights obtained from resource-based theory of the firm and institutional theory. The results, based on data collected through a survey of 241 organizations, generally support our research model. Institutional pressures and internal security needs assessment (ISNA) significantly explain the variation in organizational investment in ISCR. Specifically, coercive and normative pressures are found to have not only a direct impact but also an indirect impact through ISNA on organizational investment in ISCR.