Perceived significance of information security governance to predict the information security service quality in software service industry

Abstract

Purpose – Information security is a growing concern in society, across businesses and government. As the offshore IT services market continues to grow providing numerous benefits, there are also perceived risks with respect to the quality of information security delivered in the supply chain. This paper aims to examine, as a case, the perceptions of Indian software services provider (service provider) employees with respect to information security governance and its impact on information security service quality that is delivered to customers. Design/methodology/approach – The paper provides a framework built upon the existing dimensions and instruments for total quality management and service quality, suitably modified to reflect the context of information security. SmartPLS, a structural equation modelling technique, has been used to analyse field survey data collected from across various Indian cities and companies. Findings – Significant finding is that information security governance in an IT outsourcing company providing software services has a highly significant impact on the information security service quality, which can be predicted. The paper also establishes that there is a positive relationship collectively between elements of information security governance and information security service quality. Research limitations/implications – Since data used in this study were taken solely from the responses of employees of outsourced service companies in India, it does not show if this translates into service improvements as perceived by the customer. Practical implications – Information security governance should be made an integral part of corporate governance and is an effective strategic technique, if software outsourcing business enterprises want to achieve a competitive edge, provide client satisfaction and create trust. Originality/value – The paper presents empirical data validation of the connection between information security governance and quality of service.

Resilience in healthcare systems: Cyber security and digital transformation

“…Corresponding to the Leavitt's model (1965), the fifth hypothesis posits a relationship between an organisation's (or potentially the healthcare system's) ability to respond to cross-scale dynamics, coded as Interdependence, and its Security in Transformation. This is in line with empirical studies which have suggested that knowledge generated by establishing interdependence and value-based convergence between organisations and their supply chain can be an effective tool to tackle cyber security issues (Bahl and Wali, 2014;Neal and Ilsever, 2016). Hypothesis 6.…”

Mobile banking services quality and its impact on customer satisfaction of Indonesian Islamic banks

“…Customers are more likely to trust a new service if adequate security is provided for their transaction data (Singh and Srivastava, 2020). Bahl & Wali (2014) explained that customer information security reflects the company service quality offered to customers. Logically, most customers prefer a high-quality product, such as the security dimension, which will increase their satisfaction in using that secure product.…”

Customers’ perception of information security in internet banking

“…Reference [9] showed that information security governance as one of the parts of corporate governance urges information security service. This can help organizations to deal with information security risks through providing stable service quality meeting the expectations of their customers, learning about customer expectations and reducing the gap between customer perception and expectations.…”

“…Security incidents are happening almost every day, and they are caused by hackers, spam, viruses, spyware, zombie networks and many other threats. These incidents can have significant impact on the economy and society by violating human rights and a lot of organizations have suffered failures, serious losses and extinction due to lack of security, privacy and governance of this asset [9,10].…”

“…The gaps between customer expectations and their perceptions of the service they get which are established depending on service provider's services and behavior is recognized as service quality [9]. The roots of information security can be found in total quality management.…”