Abstract
We propose a model of security governance that draws upon agency theory to conceptualize the InfoSec function as a fiduciary for business users. We introduce a ternary typology of governance and test the efficacy of governance on goal congruence and information asymmetry. Our survey of information security managers finds that: (1) governance enhances goal congruence but does not impact information asymmetry, and (2) perceived information security service effectiveness is positively related to both information asymmetry and goal congruence. Contrary to what agency theory suggests, in the InfoSec context, information asymmetry can be exactly what is needed to enhance the principal's welfare. We conclude with a discussion of the theoretical and managerial implications of these findings.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Schedule a callDisclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.
