Relationship between Corporate Governance and Information Security Governance Effectiveness in United States Corporations

Relationship Between Corporate Governance and Information Security Governance Effectiveness in United States Corporations by Robert E. Davis MBA, West Chester University, 1985 BBA, Temple University, 1977 Doctoral Study Submitted in Partial Fulfillment of the Requirements for the Degree of Doctor of Business Administration Walden University September 2017 Abstract Cyber attackers targeting large corporations achieved a high perimeter penetration success rate during 2013, resulting in many corporations incurring financial losses. Corporate information technology leaders have a fiduciary responsibility to implement information security domain processes that effectually address the challenges for preventing and deterring information security breaches. Grounded in corporate governance theory, the purpose of this correlational study was to examine the relationship between strategic alignment, resource management, risk management, value delivery, performance measurement implementations, and information security governance (ISG) effectiveness in United States-based corporations. Surveys were used to collect data from 95 strategic and tactical leaders of the 500 largest for-profit United States headquartered corporations. The results of the multiple linear regression indicated the model was able to significantly predict ISG effectiveness, F(5, 89) = 3.08, p = 0.01, R2 = 0.15. Strategic alignment was the only statistically significant (t = 2.401, p <= 0.018) predictor. The implications for positive social change include the potential to constructively understand the correlates of ISG effectiveness, thus increasing the propensity for consumer trust and reducing consumers’ costs.Cyber attackers targeting large corporations achieved a high perimeter penetration success rate during 2013, resulting in many corporations incurring financial losses. Corporate information technology leaders have a fiduciary responsibility to implement information security domain processes that effectually address the challenges for preventing and deterring information security breaches. Grounded in corporate governance theory, the purpose of this correlational study was to examine the relationship between strategic alignment, resource management, risk management, value delivery, performance measurement implementations, and information security governance (ISG) effectiveness in United States-based corporations. Surveys were used to collect data from 95 strategic and tactical leaders of the 500 largest for-profit United States headquartered corporations. The results of the multiple linear regression indicated the model was able to significantly predict ISG effectiveness, F(5, 89) = 3.08, p = 0.01, R2 = 0.15. Strategic alignment was the only statistically significant (t = 2.401, p <= 0.018) predictor. The implications for positive social change include the potential to constructively understand the correlates of ISG effectiveness, thus increasing the propensity for consumer trust and reducing consumers’ costs. Relationship Between Corporate Governance and Information Security Governance Effectiveness in United States Corporations by Robert E. Davis MBA, West Chester University, 1985 BBA, Temple University, 1977 Doctoral Study Submitted in Partial Fulfillment of the Requirements for the Degree of Doctor of Business Administration Walden University September 2017 Dedication This doctoral study research is dedicated to my family, who has unconditionally supported my aspirations that in turn inspired me to continue my educational journey. To my beloved mother, who values education and through whose encouragement I was able to overcome doctoral program challenges: Thank you. To my pragmatic father, who enjoys reading and through whose gifted books I was able to acquire an appreciation for objectivity when addressing my chosen doctoral research topic: Thank you. To my loved significant other, your home environment oversight ensured completing my doctoral studies with minimal external interference: Thank you. Last, but not least, to my brothers and sons, thank you for sharing your higher education experiences. Acknowledgments First and foremost, I thank God for preparing me for this educational journey. I am also grateful for having such a distinguished and supportive doctoral study committee. The committee chair, Dr. Alexandre Lazo, the second committee member, Dr. Jaime Klein, and the University Research Reviewer, Dr. Reginald Taylor, provided the needed advice and guidance in meeting my prospectus, proposal, and final documentation requirements. Dr. Alexandre Lazo, thank you for your patience and support as I completed this paper. Dr. Jaime Klein, thank you for your suggested improvements for enhancing this paper. Dr. Reginald Taylor, thank you for your dedication to achieving high standards and quality for quantitative doctoral study research.