员工参与、工作投入与信息安全违规——基于扎根理论的研究

Employee Participation,Job Engagement and Information Security Violations:A Research Based on the Grounded Theory

频发的员工信息安全违规已经成为企业管理中亟待解决的现实问题。然而,现阶段以个体为分析层次归纳员工信息安全违规行为类别,同时以组织为分析层次验证员工信息安全违规控制措施的研究相对较少,这不利于信息安全管理中员工与企业的良性互动。本研究基于扎根理论分析员工信息安全违规行为的类别及影响路径,并探讨可以有效抑制员工信息安全违规的组织控制策略。研究结果表明,员工信息安全违规行为可划分为3大类下的12个小类;员工参与对其工作投入有正向影响,并负向影响信息安全违规意愿,而工作投入在员工参与和信息安全违规意愿关系中起部分中介作用;组织支持作为控制策略在抑制员工信息安全违规发生上是有效的。上述研究结论有助于企业完善信息安全管理举措,减少员工信息安全违规行为的发生。

Frequent employees’information security violations have become a real organizational problem that need to be solved urgently.However,few studies have refined employees’violations from individual perspectives and verified which organizational control measures could suppress employees’violations from an organizational perspective at the same time.This study aims to address the above concern based on job characteristics using the grounded theory.Results show that:(1)employees’information security violations can be divided into three categories and twelve subcategories.(2)employee participation has positive effects on job engagement and negative effects on employees’information security violations.In addition,job engagement plays a partial mediation role between employee participation and information security violations.(3)organizational support is effective in suppressing employees’information security violations.The results can provide firms with implications on how to improve information security management,which can reduce employees’information security violations.