An Examination of Employees' Understanding and Implementation of the Information Security Program at XYZ Engineering Center

<p><em>Purpose of Study.</em> Due to an increase in global competition and employee dishonesty, the need for information security is on the rise. Consequently the XYZ Engineering Center faces an ever-increasing threat of industrial espionage and information theft. Employees of the Center have been given the product-security policy and have been encouraged to secure confidential information. Therefore, this study was designed to determine the level at which employees at the XYZ Engineering Center understand, value, and practice information security. Additionally, the study also examined employee views on physical safety while at work.</p> <p><em>Methodology.</em> The study used analysis of variance and a two-sample f-test to statistically analyze the survey results. Quantitative data were collected by use of a questionnaire that was developed by the researcher. The questionnaire was distributed to 395 employees and was completed by 189. A number of hypotheses were developed to examine the relationship between employees’ understanding, valuing, and practicing information security and their length of service with the company, their employment status, and time in their current position. This study revealed that employees with 5 or less years of service appeared not to value, understand, or practice information security as much as employees with more time on the job. Additionally, the study found that contract employees appeared to be less concerned about information security than salaried employees. With regard to physical safety, all employees reported feeling safe at work.</p> <p><em>Conclusion. </em>The results o f this study indicate that there is a need for XYZ Engineering Center to place emphasis on working with employees to assure that compliance to security polices is met. While there is need for continued education for all employees, special attention should be given to employees with fewer years of service.</p>

Name thesis:degree_name

Doctor of Philosophy

Level thesis:degree_level

Dissertation

Discipline thesis:degree_discipline

Leadership PhD

Year

2003

Author dc:creator

• Mancini, Dale J.

Contributors dc:contributor

• Elsie P. Jackson
• Loretta B. Johns
• Douglas A. Jones

• Business
• Business Administration, Management, and Operations
• Portfolio and Security Analysis

Repository record dc:identifier

https://digitalcommons.andrews.edu/dissertations/555

OAI identifier oai:identifier

oai:digitalcommons.andrews.edu:dissertations-1554