THE DEVELOPMENT OF AN INFORMATION SYSTEM SECURITY MANAGEMENT MODEL FOR DIGITAL MEDIA PLATFORMS

Abstract

This study aimed to (1) examine information system security management strategies of digital media platforms, and (2) develop an information system security management model for digital media platforms. A mixed-methods research design was employed, integrating quantitative and qualitative approaches.The quantitative component involved data collection from 400 users of online platforms across four regions of China: Eastern China (Shandong Province), Northern China (Liaoning Province), Western China (Sichuan Province), and Southern China (Guangdong Province). The data were analyzed using descriptive statistics, including frequency, percentage, mean, and standard deviation, to explain respondents’ demographic characteristics, levels of perception, and opinions regarding information system security management strategies on digital media platforms. The qualitative component consisted of in-depth interviews and focus group discussions with 20 key informants, including government officials, executives, and online platform developers responsible for information system security governance. Qualitative data were analyzed using content analysis through systematic procedures of interview transcription, coding, data categorization, and thematic synthesis to identify key patterns, strategies, and practical insights related to information system security management.

Findings

• The findings revealed that digital media platforms adopt five key information system security management strategies: (1) establishing an information security management system; (2) defining information system security objectives; (3) formulating security governance and regulatory policies; (4) developing human resources in information system security; and (5) enhancing user trust and confidence in digital media platforms.


• The model development results indicated that the information system security management model for digital media platforms was derived from the integrated analysis and synthesis of quantitative and qualitative data. The model was subsequently developed into a CIA Triad Model, consisting of three core components: ensuring information confidentiality through authorized access control; maintaining information integrity to prevent unauthorized modification or data manipulation; and ensuring the continuous and secure availability of information systems. The proposed model provides a comprehensive framework encompassing technical, managerial, and governance dimensions and can be applied as a practical guideline for enhancing information system security management in digital media platforms.