COVID-19 has prompted a rise in telecommuting practices in most companies worldwide. Meanwhile, companies are struggling to cope with the new and evolving security threats in telecommuting using old control methods. Specifically, there is an increased danger of hacking attacks in telecommuting environments. Furthermore, corporate concerns regarding telecommuting security have led to a questioning of existing control methods that no longer seem adequate. Significant research has been conducted on the factors that improve the effectiveness of corporate security policies, such as formal control, informal control, and extrarole behaviors. However, these studies did not consider telecommuting environments, which surged after the COVID-19 outbreak. Telecommuting loosens the physical control over employees and eliminates the collegial environment in which employees encourage each other to protect system information. This study determined how the factors that influence the effectiveness of existing information security policies behave in a telecommuting environment. Our study shows that specification and mandatoriness are the most important factors for an effective telecommuting security policy. We conclude that this sudden change in the working environment has rendered existing security controls obsolete, and specification and mandatoriness are likely to receive increasingly more attention in the growing field of telecommuting security policy.

中文翻译：

---

影响远程办公企业安全策略有效性的因素

COVID-19 促使全球大多数公司的远程办公实践有所增加。与此同时，公司正在努力应对使用旧控制方法的远程办公中新的和不断变化的安全威胁。具体而言，远程办公环境中黑客攻击的危险性增加。此外，企业对远程办公安全的担忧导致对现有控制方法的质疑似乎不再足够。已经对提高公司安全策略有效性的因素进行了大量研究，例如正式控制、非正式控制和角色外行为。但是，这些研究并未考虑在 COVID-19 爆发后激增的远程办公环境。远程办公放松了对员工的物理控制，消除了员工相互鼓励保护系统信息的大学环境。这项研究确定了影响现有信息安全策略有效性的因素在远程办公环境中的表现。我们的研究表明，规范和强制性是有效的远程办公安全策略的最重要因素。我们得出结论，工作环境的这种突然变化已经使现有的安全控制变得过时，规范和强制性在不断发展的远程办公安全政策领域可能会受到越来越多的关注。这项研究确定了影响现有信息安全策略有效性的因素在远程办公环境中的表现。我们的研究表明，规范和强制性是有效的远程办公安全策略的最重要因素。我们得出结论，工作环境的这种突然变化已经使现有的安全控制变得过时，规范和强制性在不断发展的远程办公安全政策领域可能会受到越来越多的关注。这项研究确定了影响现有信息安全策略有效性的因素在远程办公环境中的表现。我们的研究表明，规范和强制性是有效的远程办公安全策略的最重要因素。我们得出结论，工作环境的这种突然变化已经使现有的安全控制变得过时，规范和强制性在不断发展的远程办公安全政策领域可能会受到越来越多的关注。