| Summary: | 碩士 === 國立臺灣科技大學 === 資訊管理系 === 95 === Along with the flourishing development of information technology (IT) and Internet, information assets are now of critical importance to firms’ competitive advantage. To avoid information security incidents which may lead to a serious lost of firm’s time, cost and reputation, more efforts are needed for enterprises to secure their information assets. In particularly, when the Information Security Management System (ISMS) promoted by BSI has been proved to be the “best practice” for information security management, more and more organizations are seeking the ISMS certification, in proofing their secure capabilities.
However, previous studies mainly focus on the improvement and investigation of technical protection and have neglected the organizational perspectives of information security management. To address this gap, the main purpose of this study is to explore the appropriation process in the development of ISMS in terms of Adaptive Structuration Theory (AST). Drawing on four cases from Taiwan’s public and private sectors, both the appropriation process and social interactions of adopting ISMS are examined. Based on evidence from the cases, this study found that several factors such as organizational context, project complexity, stakeholders’ participation, and institutional context influence on the appropriation process and social interactions. The implications and future research directions are also discussed.
|
|---|
