Budgeting process for information security expenditures

Communications of the ACM

Volumn 49, Issue 1, 2006, Pages 121-125

  Gordon, Lawrence A ^a   Loeb, Martin P ^a  

^a UNIVERSITY OF MARYLAND   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COST-BENEFIT ANALYSIS; NET PRESENT VALUE (NPV);

BUDGET CONTROL; COMPUTER SOFTWARE; COSTS; DECISION MAKING; INVESTMENTS; PERSONNEL;

SECURITY OF DATA;

EID: 33745210521     PISSN: 00010782     EISSN: 00010782     Source Type: Journal    
DOI: 10.1145/1107458.1107465     Document Type: Review

References (7)

1. Anderson, R. Why information security is hard - An economic perspective. In Proceedings of the 17th Annual Computer Security Applications Conference. (New Orleans, LA, 2001).
2. Campbell, K., Gordon, L., Loeb, M., and Zhou, L. The economic cost of publicly announced information security breaches: Empirical evidence from the stock market.J. Comput, Sec, 11, 3 (2003), 431-448.
3. Gordon, L. Benefit-cost analysis and resource allocation decisions. Acc. Org. Soc. 14, 3 (1989), 247-258.
4. Gordon, L., and Loeb, M. The economics of information security investment. ACM Trans, Inf. Syst. Sec. 5, 4 (2002), 438-457.
5. Gordon, L., Loeb, M., and Lucyshyn, W. Information security expenditures and real options: A wait-and-see approach. Comput. Sec. J. 19, 2 (2003), 1-7.
6. Gordon, L., Loeb, M., and Lucyshyn, W. Sharing information on computer systems security: An economic analysis. J. Acc. Public Policy 22, 6 (2003), 461-485.
7. Haka, S., Gordon, L., and Pinches, G. Sophistkated capital budgeting selection techniques and firm performance. Acc. Rev. 60, 4 (1985), 651-669.