Relationship Structure Analysis on Determinants of Enterprise Information Security Investment Decision Based on ISM

Information security is one of the biggest threats to enterprises; how to identify the determinants of enterprise information security investment (EISI) and put forward corresponding countermeasures is related to the continuity of enterprise operation, which is an urgent problem to be solved at present. This article identifies the index system of factors that affect the EISI by using the Delphi method. The interpretive structural model (ISM) of the influence factors of EISI is constructed. The result shows that the ISM of EISI determinants is a multilevel hierarchical structure with five levels. According to the logical structure of the model, the most direct reasons affecting EISI are the level of enterprise information security technology and enterprise information security behavior; information security laws and regulations and national policies are the deep-seated reasons for EISI. It is of theoretical value and reference to understand the formation, model establishment, and evolution mechanism of EISI decision making.