Improving information security performance: the role of management support and security operation center

Abstract

The implementation of Information Technology (IT) in any aspects of business has change the landscape of business. Specifically, IT has made significant and major changes in banking industry, especially on the way people do business with bank. Beside as business enabler, IT now become a major tool for bank to win the competition. With the strategic role of IT in banking industry, there is a risk from security point of view. The new sophisticated and advanced kind of attack drive to higher impact for banks. Beside direct loss caused by successful attack, there is also loss caused by image damage and sanction from regulatory. With many initiatives can be done to improve Information Security condition, banking need to prioritize the initiative that has most significant impact. Management support on information security is cited by many literatures as basic requirement for improving Information Security condition. Security Operation Center also proposed as initiatives to enhance the capability of detection and response to attack. This research tries to empirically find out the impact of Management Support to information security performance and the role of Security Operation Center on mediating both variables. Data are gathered from banks in Indonesia using survey methodology through questionnaire answered by qualified respondents. The sample design used is a probability sample with disproportionate stratified random sampling and analyzed using Structural Equation Modeling-Partial Least Square. This paper shows that management support has significant impact on improving Information Security condition in banking industry. It also concludes that SOC has complimentary mediation of relationship between management support and information security performance. Practically, result of this research can be foundation for company that wants to focus on factors that significantly impact security performance, while theoretically confirmed previous studies on the role of management support.