A formal model for pricing information systems insurance contracts

Computer Standards and Interfaces

Volumn 27, Issue 5, 2005, Pages 521-532

  Lambrinoudakis, Costas ^a   Gritzalis, Stefanos ^a   Hatzopoulos, Petros ^a   Yannacopoulos, Athanasios N ^a   Katsikas, Sokratis ^a  

^a UNIVERSITY OF THE AEGEAN   (Greece)

Author keywords

Information systems insurance; Information systems security; Markov model; Premium estimation; Risk analysis and management methodology; Transition intensity approach; Valuation of security investment

Indexed keywords

CONTRACTS; INFORMATION SCIENCE; INSURANCE; MARKOV PROCESSES; MATHEMATICAL MODELS; RISK ASSESSMENT; SECURITY OF DATA;

INFORMATION SYSTEM SECURITY; INFORMATION SYSTEMS INSURANCE; MARKOV MODEL; PREMIUM ESTIMATION; RISK ANALYSIS AND MANAGEMENT METHODOLOGY; TRANSITION INTENSITY APPROACH; VARIETY OF SECURITY INVESTMENTS;

COST ACCOUNTING;

EID: 17744362068     PISSN: 09205489     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.csi.2005.01.010     Document Type: Article

References (12)

1. R. Anderson Why information security is hard-An economic perspective 17th Annual Computer Security Applications Conference, New Orleans, Louisiana 2001 87 92
2. H. Cavusoglu, B. Mishra, and S. Raghunathan A model for evaluating IT security investments Communications of the ACM 47 7 2004 87 92
3. H. Cavusoglu, B. Mishra, and S. Raghunathan The effect of internet security breach announcements on shareholder wealth: capital market reactions for breached firms and internet security developers International Journal of Electronic Commerce 9 4 2004 69 105
4. Commission of the European Communities. Risk analysis methods database, INFOSEC Programme, Project S2014, 1993.
5. J. Eloff, L. Labuschagne, and K. Badenhorst A comparative framework for risk analysis methods Computers and Security 12 6 1993 597 603
6. L. Gordon, and M. Loeb The economics of information security investment ACM Transactions on Information and System Security 5 4 2002 438 457
7. L. Gordon, M. Loeb, and T. Sohail A framework for using insurance for cyber-risk management Communications of the ACM 46 3 2003 (March) 81 86
8. S. Haberman, and E. Pitacco Actuarial models for disability insurance 1999 Chapman and Hall
9. ISO/IEC/JTC1, "Information technology-security techniques-Guidelines for the management of IT security", GMITS, ISO/IEC DTR13335, 1996.
10. Moitra S., Konda S., "The survivability of network systems: An empirical analysis", Carnegie Mellon Software Engineering Institute, Technical Report, CMU/SEI-200-TR-021.
11. H.R. Varian Microeconomic analysis 1992 Norton & Company
12. Varian H.R., "Systems reliability and free riding" Working Paper, 2004.