Proper

Abstract

Recently, new security risks are increasing as companies introduce new services such as mobile, Cloud, Big Data and IoT, which are core technologies of the 4th industrial revolution. The security environments of Korean companies are a low level of security organization, budgets, so security investments are urgent to cope with new security risks of new services. We analyze investment factors on information security and suggest policies to improve security levels through security investments. In this paper, we design a research model based on UTAUT and protection motivation theory, consisting of assets, concerns (threats and vulnerability), experience and habits, social influences, facilitation conditions. For the empirical analysis, data from the survey of information security were used and the structural equation model was analyzed. The results of analysis shows that security investments have more influence on internal factors (assets, facilitation conditions, experience and habits) rather than external threats.