Evaluating information security investments using the Analytic hierarchy process

Communications of the ACM

Volumn 48, Issue 2, 2005, Pages 78-83

  Bodin, Lawrence D ^a   Gordon, Lawrence A ^a   Loeb, Martin P ^a,b  

^a UNIVERSITY OF MARYLAND   (United States)

^b Department of Accounting ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANALYTIC HIERARCHY PROCESS (AHP); CHIEF FINANCIAL OFFICER (CFO); CHIEF INFORMATION SECURITY OFFICER (CISO); REQUEST FOR PROPOSAL (RFP);

DATABASE SYSTEMS; DECISION MAKING; HIERARCHICAL SYSTEMS; INVESTMENTS; MATRIX ALGEBRA; SOCIETIES AND INSTITUTIONS;

SECURITY OF DATA;

EID: 13444274614     PISSN: 00010782     EISSN: None     Source Type: Journal    
DOI: 10.1145/1042091.1042094     Document Type: Review

References (7)

1. Bodin, L. and Epstein, E. Who's on first - with probability 4. Computers & Operations Research 27 (1999), 205-215.
2. Bodin, L. and Gass, S. On teaching the analytic hierarchy process. Computers and Operations Research 30, 10 (2003), 1487-1497.
3. Bodin, L., Gordon, L.A., and Loeb, M.P. Making Security Investment Decisions Using the Analytic Hierarchy Process, Working Paper, University of Maryland, 2003.
4. Gordon, L.A. and Loeb, M.P. The economics of investment in information security. ACM Transactions on Information and System Security 5, 4 (Nov. 2002), 438-457.
5. Gordon, L.A., Loeb, M.P., and Lucyshyn, W. Information security expenditures and real options: A wait and see approach. Computer Security Journal 19, 2 (Spring 2003), 1-7.
6. Saaty, T.L. The Analytic Hierarchy Process. McGraw-Hill, New York, 1980.
7. Saaty, T.L. A scaling method for priorities in hierarchical structures. Journal of Mathematical Psychology 15, 3 (1977), 234-281.