治理机制、制度化与企业信息安全绩效

Governance Mechanism,Institutionalization,and Enterprises’ Information Security Performance

为了明确治理机制如何规范和促进企业信息安全管理，探讨了治理机制（包括契约治理和关系治理），制度化（包括识别、履行和内化）和信息安全绩效之间的关系。以国内通过信息安全管理体系认证的企业为调研对象，采用Smart PLS2．0对148份有效问卷进行统计分析。结果表明：契约治理对制度化的履行有显著正向影响；关系治理对制度化的识别和内化有显著正向影响，这同时表明契约治理和关系治理的互补性；识别、履行和内化对信息安全绩效有显著正向影响。

To clarify how governance mechanism normalize and prompt information security management, the relationship between governance mechanism, institutionalization, and information security performance was explored. The data was collected from enterprises which have passed the certification of information security management system, and 148 samples were analyzed by Smart PLS 2.0. The results show that contractual governance has a positive effect on implementation ; relational governance has a positive effect on identification and internalization, thus, contractual and relational governance are complementary. In addition, identification, implementation, and internalization have a positive effect on information security performance.