4.2. Participants
The unit of analysis in this study was the individual organization adopting IIS. From among the more than 20,000 Korean companies that have adopted IIS, the respondent organizations were composed as follows. First, those industries that have used IIS heavily were determined and, from company databases open to the public, about 2000 Korean companies that have implemented IIS comprehensively in their respective industries were selected. A random sample survey was not used, as questions can be answered reliably only by those companies that have implemented IIS appropriately. From among the 2000 companies selected, 129 companies were randomly contacted, and their IIS implementation states were confirmed. Nine companies refused to participate in the interview. Some of these companies were afraid of exposing the vulnerabilities of their systems. All of the other firms responded to our request for information and are included in the study. Hence, a total of 120 companies provided analyzable responses. The response rate was high because participation in the survey was solicited through a direct call to IIS managers, and the objectives of the study were explained. A comparative analysis of industry membership and revenues was conducted, in order to see if the responding firms had significantly different characteristics from the non-respondent firms. No significant differences were found supporting that response bias is not a concern in this study.