---

The purpose of this study was to draw on information security and competitive advantage of the enterprise to explicate the nature of an enterprise s information security technology capability and its relationship to business process. This study contributes to the growing body of literature linking business and IT which provides a framework for understanding how information security technology may be appropriately viewed as an organizational capability. More importantly, it is one of the first studies to provide empirical, descriptive, and interpretive tests of business and IT professional perspective on VPN as information security technology. Viewed from business and IT perspective, the research findings indicate that information security technology capability is a rent generating resource that is not easily imitated or substituted. Isolating mechanisms such as time compression diseconomies, connectedness of resources, and social complexity allow enterprises with high information security capability to achieve and sustain superior performance.

---

Sid Sirisukha is Director of Science and Technology Faculty at Stamford International University. Sid holds a Ph.D. in computer and information science from Auckland University of Technology (AUT), M.Sc. in information management from Stevens Institute of Technology, and B.Sc. in computer information systems from Caldwell College.

---