Aligning stakeholder goals for effective information security in e-government systems: A grounded theory approach

探討利害關係人目標融合對電子化政府資訊安全效率的提升：使用紮根理論

電子化政府系統的運作為民眾提供了全面的自動化服務，在考慮資訊安全議題時，需包括資訊安全維運費用、投資成本以及電子化政府系統內的人員訓練等。本研究的主要目的是觀察電子化政府系統中主要利害關係人的資訊安全目標。本研究採用選擇性抽樣方法，以 E-Net 電子化政府系統為例，對來自五個不同利害關係人單位共 13 名參與者進行訪談，並使用扎根理論方法進行資料分析。研究發現，首先，資訊安全管理的關鍵在於確保資料完整性以及促進系統效能，而這些都建立在利害關係人之間的共同目標。E-Net系統中，各利害關係人之間的合作、管理機制的建立和資源的管理，都是基於這些共同目標。其次，滿意度是優化系統效能的重要因素。為了達成這一目標，政府技術單位、政府業務單位和資訊系統供應商分析安全需求、設計系統並提供清晰的操作流程，從而合作完成共同目標。第三，系統安全這一共同目標提高了政府技術和業務單位的資安意識，並提升了他們的資安價值觀，引導政府技術和業務單位一同參與資安控制活動。而這些控制活動也有助於維持資料完整性和系統安全。本研究深入探討了共同目標在資訊系統安全專案中的重要性，強調共同目標對於融合利害關係人個別目標、調整管理流程和定義安全規則的重要性。

The e-government system operates autonomously, providing a comprehensive array of services to government personnel. It is essential to consider the costs associated with information security incidents, which include expenses, capital investments, and personnel within the e-government system. The primary objective of this research has been to identify security goals among primary stakeholders in the e-government system, with a particular emphasis on E-Net. Interviews were conducted with 13 participants from five disparate stakeholder groups through selective sampling. The interview data was analyzed using grounded theory methodology. There are several findings: first, security management is crucial in ensuring the integrity of data and promoting system effectiveness. Cooperation among stakeholders in the E-Net system leads to skillful interweaving of common goals, management mechanisms, and resources. Second, satisfaction is a significant factor in optimizing system performance, as technical units, business units, and vendors analyze security requirements, design systems, and provide clear operational processes. Third, system security goals foster awareness and promote its value among technical and business units, directing them to participate in security control activities. Operational processes and control activities help maintain data integrity and system security. This paper explores the importance of common goals in IS security projects, highlighting their role in aligning stakeholders’ goals, adjusting management processes, and defining security rules.