Towards a standard approach for quantifying an ICT security investment

Computer Standards and Interfaces

Volumn 30, Issue 4, 2008, Pages 216-222

  Bojanc, Rok ^a   Jerman Blažič, Borka ^a  

^a UNIVERSITY OF LJUBLJANA   (Slovenia)

Author keywords

Cyber crime prevention; Information security; Security technology investment

Indexed keywords

COMPUTER CRIME; ECONOMIC ANALYSIS; INTEGRATED CIRCUITS; SECURITY OF DATA;

CYBER CRIME PREVENTION; POTENTIAL RISKS; SECURITY TECHNOLOGY INVESTMENT;

INFORMATION SYSTEMS;

EID: 39749181513     PISSN: 09205489     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.csi.2007.10.013     Document Type: Article

References (14)

1. Acquisti A., and Zhang B. Financial privacy for free? US consumers' response to FACTA. The Fifth Workshop on the Economics of Information Security (WEIS'06) (2006)
2. Anderson R. Why information security is hard: an economic perspective. 17th Annual Computer Security Applications Conference (ACSAC), New Orleans, LA (2001)
3. Camp L.J. The state of economics of information security. A Journal of Law and Policy for the Information Society 2 2 (2006)
4. Campbell K., Gordon L., Loeb M., and Zhou L. The economic cost of publicly announced information security breaches: empirical evidence from the stock market. Journal of Computer Security 11 3 (2003) 431-448
5. Cavusoglu H., Mishra B., and Raghunathan S. A model for evaluating IT security investments. Communications of the ACM 47 7 (2004) 87-92
6. CSI/FBI Computer Crime and Security Survey (2006). http://www.gocsi.com/forms/fbi/csi_fbi_survey.jhtml Retrieved March 10, 2007, from http://www.gocsi.com/forms/fbi/csi_fbi_survey.jhtml
7. DTI Information security breaches survey (2006). http://www.pwc.com/uk/eng/ins-sol/publ/pwc_dti-fullsurveyresults06.pdf Retrieved March 18, 2007, from http://www.pwc.com/uk/eng/ins-sol/publ/pwc_dti-fullsurveyresults06.pdf
8. Gartner Inc. Gartner Says Number of Identity Theft Victims Has Increased More Than 50 Percent Since 2003 (March 6 2007). http://www.gartner.com/it/page.jsp Retrieved June 5, 2007, from http://www.gartner.com/it/page.jsp?id=501912
9. Geer D. Making choices to show ROI. Secure Business Quarterly 1 2 (2002) 1-5
10. Gordon L.A., and Loeb M.P. The economics of information security investment. ACM Transactions on Information and System Security 5 4 (2002) 438-457
11. Gordon L.A., and Loeb M.P. Managing Cybersecurity Resources: A Cost-Benefit Analysis (2006), McGraw Hill
12. Gordon L.A., and Richardson R. The new economics of information security. Information Week (April 13 2004) 53-56. http://www.banktech.com/aml/showArticle.jhtml Retrieved July 11, 2007, from http://www.banktech.com/aml/showArticle.jhtml?articleID=18901266
13. Tanaka H., Liu W., and Matsuura K. An empirical analysis of security investment in countermeasures based on an enterprise survey in Japan. The Fifth Workshop on the Economics of Information Security (WEIS '06) (2006)
14. Wathieu L., and Friedman A. An empirical approach to understanding privacy valuation. The Fourth Workshop on the Economics of Information Security Series (WEIS '05), Cambridge, MA (June 2-3 2005)