IDEAS home Printed from https://ideas.repec.org/a/gam/jsusta/v12y2020i15p6139-d392222.html
   My bibliography  Save this article

Impacts of Sustainable Information Technology Capabilities on Information Security Assimilation: The Moderating Effects of Policy—Technology Balance

Author

Listed:
  • Sanghyun Kim

    (School of Business Administration, Kyungpook National University, Daegu 41566, Korea)

  • Bora Kim

    (School of Business Administration, Kyungpook National University, Daegu 41566, Korea)

  • Minsoo Seo

    (School of Business Administration, Soongsil University, Seoul 06978, Korea)

Abstract

Information security management (ISM) has emerged as a major challenge to sustainable management of companies that highly rely on information technology (IT). To achieve organizational sustainability for managing assets, it is critical for all members of the organization to be assimilated into ISM. An important consideration of ISM assimilation is sustainable IT capabilities. However, so far, there are limited empirical studies on ISM assimilation, particularly those focusing on importance of the organization’s sustainable IT capabilities. Therefore, this study proposes three sustainable IT capabilities (viz., IT infrastructure, IT business spanning capability, and IT proactive stance) with their antecedents based on the existing research, and attempts to empirically prove the impact of these sustainable IT capabilities on ISM assimilation for sustainable management of assets. Additionally, this study proposes policy-to-technology balance as a moderator on the relationships between the three sustainable IT capabilities and ISM assimilation to examine the impact of the non-technical aspect. Responses from 232 upper-management-level employees at various firms currently implementing ISM were collected. Structural equation analysis was run using AMOS 22.0. The results show that the three sustainable IT capabilities were found to have a positive effect on ISM. Furthermore, policy-to-technology balance was found to strengthen the relationship between two IT capabilities (IT infrastructure and IT business spanning capability) and ISM assimilation. However, it emerges that the policy-to-technology balance does not impact IT proactive stance and assimilation. The findings provide meaningful information for future research on sustainable IT capabilities and ISM along with key guidance for the organization to establish a complementary strategy for sustainable assets.

Suggested Citation

  • Sanghyun Kim & Bora Kim & Minsoo Seo, 2020. "Impacts of Sustainable Information Technology Capabilities on Information Security Assimilation: The Moderating Effects of Policy—Technology Balance," Sustainability, MDPI, vol. 12(15), pages 1-24, July.
    • Handle: RePEc:gam:jsusta:v:12:y:2020:i:15:p:6139-:d:392222
    as

    Download full text from publisher

    File URL: https://www.mdpi.com/2071-1050/12/15/6139/pdf
    Download Restriction: no
    File URL: https://www.mdpi.com/2071-1050/12/15/6139/
    Download Restriction: no
    ---><---

    References listed on IDEAS

    as
    1. Curtis P. Armstrong & V. Sambamurthy, 1999. "Information Technology Assimilation in Firms: The Influence of Senior Leadership and IT Infrastructures," Information Systems Research, INFORMS, vol. 10(4), pages 304-327, December.
    2. Robert G. Fichman & Chris F. Kemerer, 1999. "The Illusory Diffusion of Innovation: An Examination of Assimilation Gaps," Information Systems Research, INFORMS, vol. 10(3), pages 255-275, September.
    3. Robert D. Dewar & Jane E. Dutton, 1986. "The Adoption of Radical and Incremental Innovations: An Empirical Analysis," Management Science, INFORMS, vol. 32(11), pages 1422-1433, November.
    4. David J Teece, 2008. "Capturing Value from Technological Innovation: Integration, Strategic Partnering, and Licensing Decisions," World Scientific Book Chapters, in: Technological Know-How, Organizational Capabilities, And Strategic Management Business Strategy and Enterprise Development in Competitive Environments, chapter 12, pages 237-252, World Scientific Publishing Co. Pte. Ltd..
    5. Neil F. Doherty & Heather Fulford, 2005. "Do Information Security Policies Reduce the Incidence of Security Breaches: An Exploratory Analysis," Information Resources Management Journal (IRMJ), IGI Global, vol. 18(4), pages 21-39, October.
    6. Victoria L. Mitchell & Robert W. Zmud, 1999. "The Effects of Coupling IT and Work Process Strategies in Redesign Projects," Organization Science, INFORMS, vol. 10(4), pages 424-438, August.
    7. Robert G. Fichman, 2004. "Real Options and IT Platform Adoption: Implications for Theory and Practice," Information Systems Research, INFORMS, vol. 15(2), pages 132-154, June.
    8. Sulin Ba & Jan Stallaert & Andrew B. Whinston, 2001. "Research Commentary: Introducing a Third Dimension in Information Systems Design—The Case for Incentive Alignment," Information Systems Research, INFORMS, vol. 12(3), pages 225-239, September.
    9. Birger Wernerfelt, 1984. "A resource‐based view of the firm," Strategic Management Journal, Wiley Blackwell, vol. 5(2), pages 171-180, April.
    10. Akbar Zaheer & Srilata Zaheer, 1997. "Catching the Wave: Alertness, Responsiveness, and Market Influence in Global Electronic Networks," Management Science, INFORMS, vol. 43(11), pages 1493-1509, November.
    11. William H. DeLone & Ephraim R. McLean, 1992. "Information Systems Success: The Quest for the Dependent Variable," Information Systems Research, INFORMS, vol. 3(1), pages 60-95, March.
    12. Carol Hsu & Jae-Nam Lee & Detmar W. Straub, 2012. "Institutional Influences on Information Systems Security Innovations," Information Systems Research, INFORMS, vol. 23(3-part-2), pages 918-939, September.
    13. Zahra, Shaker A. & Bogner, William C., 2000. "Technology strategy and software new ventures' performance: Exploring the moderating effect of the competitive environment," Journal of Business Venturing, Elsevier, vol. 15(2), pages 135-173, March.
    14. David J. Teece & Gary Pisano & Amy Shuen, 1997. "Dynamic capabilities and strategic management," Strategic Management Journal, Wiley Blackwell, vol. 18(7), pages 509-533, August.
    15. Michael J. Tippins & Ravipreet S. Sohi, 2003. "IT competency and firm performance: is organizational learning a missing link?," Strategic Management Journal, Wiley Blackwell, vol. 24(8), pages 745-761, August.
    16. Sam Ransbotham & Sabyasachi Mitra, 2009. "Choice and Chance: A Conceptual Model of Paths to Information Security Compromise," Information Systems Research, INFORMS, vol. 20(1), pages 121-139, March.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Rajan, Rishabh & Rana, Nripendra P. & Parameswar, Nakul & Dhir, Sanjay & Sushil, & Dwivedi, Yogesh K., 2021. "Developing a modified total interpretive structural model (M-TISM) for organizational strategic cybersecurity management," Technological Forecasting and Social Change, Elsevier, vol. 170(C).

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Garrison, Gary & Wakefield, Robin L. & Kim, Sanghyun, 2015. "The effects of IT capabilities and delivery model on cloud computing success and firm performance for cloud supported processes and operations," International Journal of Information Management, Elsevier, vol. 35(4), pages 377-393.
    2. Teubner, Rolf Alexander & Mocker, Martin, 2008. "A literature overview on strategic information systems planning," ERCIS Working Papers 6, University of Münster, European Research Center for Information Systems (ERCIS).
    3. Carol Hsu & Jae-Nam Lee & Detmar W. Straub, 2012. "Institutional Influences on Information Systems Security Innovations," Information Systems Research, INFORMS, vol. 23(3-part-2), pages 918-939, September.
    4. Probir Kumar Banerjee & Louis C. Ma, 2012. "Routinisation of B2B E-commerce by small firms: A process perspective," Information Systems Frontiers, Springer, vol. 14(5), pages 1033-1046, December.
    5. Suoniemi, Samppa & Terho, Harri & Zablah, Alex & Olkkonen, Rami & Straub, Detmar W., 2021. "The impact of firm-level and project-level it capabilities on CRM system quality and organizational productivity," Journal of Business Research, Elsevier, vol. 127(C), pages 108-122.
    6. Abhay Nath Mishra & Prabhudev Konana & Anitesh Barua, 2007. "Antecedents and Consequences of Internet Use in Procurement: An Empirical Investigation of U.S. Manufacturing Firms," Information Systems Research, INFORMS, vol. 18(1), pages 103-120, March.
    7. Cemal Zehir & Mahmut Yavuz, 2014. "A Field Research on Organizational Learning, Crisis Management Capability and Firm Performance," International Journal of Research in Business and Social Science (2147-4478), Center for the Strategic Studies in Business and Finance, vol. 3(3), pages 01-17, July.
    8. Arun Rai & Xinlin Tang, 2010. "Leveraging IT Capabilities and Competitive Process Capabilities for the Management of Interorganizational Relationship Portfolios," Information Systems Research, INFORMS, vol. 21(3), pages 516-542, September.
    9. Abhay Nath Mishra & Ritu Agarwal, 2010. "Technological Frames, Organizational Capabilities, and IT Use: An Empirical Investigation of Electronic Procurement," Information Systems Research, INFORMS, vol. 21(2), pages 249-270, June.
    10. Rosenbusch, Nina & Brinckmann, Jan & Bausch, Andreas, 2011. "Is innovation always beneficial? A meta-analysis of the relationship between innovation and performance in SMEs," Journal of Business Venturing, Elsevier, vol. 26(4), pages 441-457, July.
    11. Xixi Li & J. J. Po-An Hsieh & Arun Rai, 2013. "Motivational Differences Across Post-Acceptance Information System Usage Behaviors: An Investigation in the Business Intelligence Systems Context," Information Systems Research, INFORMS, vol. 24(3), pages 659-682, September.
    12. Shin, Hojung & Lee, Jae-Nam & Kim, DaeSoo & Rhim, Hosun, 2015. "Strategic agility of Korean small and medium enterprises and its influence on operational and firm performance," International Journal of Production Economics, Elsevier, vol. 168(C), pages 181-196.
    13. Nam, Dalwoo & Lee, Junyeong & Lee, Heeseok, 2019. "Business analytics use in CRM: A nomological net from IT competence to CRM performance," International Journal of Information Management, Elsevier, vol. 45(C), pages 233-245.
    14. Lucía Muñoz-Pascual & Jesús Galende & Carla Curado, 2021. "Contributions to Sustainability in SMEs: Human Resources, Sustainable Product Innovation Performance and the Mediating Role of Employee Creativity," Sustainability, MDPI, vol. 13(4), pages 1-20, February.
    15. Ashish Varma & Kaushal Bhalotia & Karan Gambhir, 2020. "Innovating for competitive advantage: managerial risk-taking ability counterbalances management controls," Journal of Management & Governance, Springer;Accademia Italiana di Economia Aziendale (AIDEA), vol. 24(2), pages 389-409, June.
    16. Robert G. Fichman, 2004. "Real Options and IT Platform Adoption: Implications for Theory and Practice," Information Systems Research, INFORMS, vol. 15(2), pages 132-154, June.
    17. Peter E. Harland & Zakir Uddin & Sven Laudien, 2020. "Product platforms as a lever of competitive advantage on a company-wide level: a resource management perspective," Review of Managerial Science, Springer, vol. 14(1), pages 137-158, February.
    18. Bruno Michel Roman Pais Seles & Janaina Mascarenhas & Ana Beatriz Lopes de Sousa Jabbour & Adriana Hoffman Trevisan, 2022. "Smoothing the circular economy transition: The role of resources and capabilities enablers," Business Strategy and the Environment, Wiley Blackwell, vol. 31(4), pages 1814-1837, May.
    19. Arie Y Lewin & Silvia Massini & Carine Peeters, 2020. "Absorptive capacity, socially enabling mechanisms, and the role of learning from trial and error experiments: A tribute to Dan Levinthal’s contribution to international business research," Journal of International Business Studies, Palgrave Macmillan;Academy of International Business, vol. 51(9), pages 1568-1579, December.
    20. André de Abreu Saraiva Monteiro Alves & Fernando Manuel Pereira de Oliveira Carvalho, 2022. "How Dynamic Managerial Capabilities, Entrepreneurial Orientation, and Operational Capabilities Impact Microenterprises’ Global Performance," Sustainability, MDPI, vol. 15(1), pages 1-23, December.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:gam:jsusta:v:12:y:2020:i:15:p:6139-:d:392222. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: MDPI Indexing Manager (email available below). General contact details of provider: https://www.mdpi.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.