| The research problem addressed in this quantitative correlational study was the inadequacy of sound information security management (ISM) practices in K-12 school districts, despite their increasing ownership of information assets. Researchers have linked organizational and sociotechnical factors to the implementation of information security measures. Guided by the contingency, rational action, and sociotechnical theories, the purpose of this study was to assess the relationship among organizational and sociotechnical factors and ISM effectiveness in school districts. Research questions examined relationships among 6 variables. Data were collected from a postal survey from top information technology (IT) officers sampled from a population of 2,278 school districts in the northeastern United States. A one-way analysis of variance indicated a statistically significant relationship between preventive measures and information systems security effectiveness. The Kruskal-Wallis test revealed statistically significant relationships in 2 pairs of variables: senior management support and preventive measures, and security/IT budget ratio and preventive measures. The Spearman's correlation test indicated a statistically significant relationship between deterrent efforts and security effectiveness, organizational size and deterrent efforts, and security/IT budget ratio and deterrent efforts. Recommendations include strengthening IT organizations in school districts by establishing cabinet-level IT leadership and hiring qualified officers, leveraging security/IT budgets in support of preventive and deterrent measures, and aligning business goals with IT objectives. This study contributes to positive social change by providing stakeholders with a basis for establishing meaningful information security organization and effective ISM programs in school districts. |
