The Intention to Security Outsourcing to MSSP: An Organization Learning Perspective

• Main Authors: Ting-Yueh Shih, 施廷岳
• Other Authors: 許瑋元
• Format: Others
• Language: en_US
• Published: 2014
• Online Access: http://ndltd.ncl.edu.tw/handle/81715861497040656554

碩士 === 國立臺灣大學 === 資訊管理學研究所 === 102 === The number of information security attacks has been increasing rapidly these days. However, most organizations do not have enough well-trained information security professionals, because of the security talent shortage. To improve information security management, more and more firms adopted or considered information security outsourcing. Under the protection and the control by managed security service providers (MSSP), firms relieved stress from security attacks. Besides, MSS gradually draws attention from scholars. Most literature analyzed the intention to outsource from economic perspective. Even though most firms generated benefits from production cost advantages, they should learn from providers to improve their own capabilities. Therefore, based on organizational learning theory, we constructed a model to analyze the intention to outsource information security management to MSSP. The result showed that learning processes occurred during the cooperation. Firm improved their learning capabilities and had more confidence to cooperate with other firms in the future.