Information security and risk management

Communications of the ACM

Volumn 51, Issue 4, 2008, Pages 64-68

  Bodin, Lawrence D ^a   Gordon, Lawrence A ^a,b   Loeb, Martin P ^a,b,c  

^a UNIVERSITY OF MARYLAND   (United States)

^b UNIVERSITY OF MARYLAND   (United States)

^c Department of Accounting and Information Assurance ^*

Author keywords

[No Author keywords available]

Indexed keywords

ANALYTIC HIERARCHY PROCESS (AHP); ANNUAL LOSS EXPECTANCY (ALE); INFORMATION SECURITY RISKS; PERCEIVED COMPOSITE RISK (PCR);

HIERARCHICAL SYSTEMS; PROBABILITY; PROCESS ENGINEERING; RISK MANAGEMENT;

SECURITY OF DATA;

EID: 42149112876     PISSN: 00010782     EISSN: 15577317     Source Type: Journal    
DOI: 10.1145/1330311.1330325     Document Type: Article

References (8)

1. Bodin, L., Gordon, L., and Loeb, M. Evaluating information security investments using the analytic hierarchy. Commun. ACM 48, 2 (Feb. 2005), 461-485.
2. Gordon, L. and Loeb, M. Budgeting process for information security expenditures: Empirical evidence. Commun. ACM 49, 1 (Jan. 2006), 121-125.
3. Gordon, L. and Loeb, M. Managing Cybersecurity Resources: A Cost-Benefit Analysis. McGraw-Hill, New York, 2006.
4. Gordon, L., Loeb, M., and Lucyshyn, W. Sharing information on computer systems: An economic analysis. Journal of Accounting and Public Policy 22, 6 (Nov.-Dec. 2003), 461-485.
5. Gordon, L., Loeb, M., and Sohail, T. A framework for using insurance for cyber risk management. Commun. ACM 46, 3 (Mar. 2003), 81-85.
6. Gordon, L. and Loeb, M. The economics of investment in information security. ACM Transactions on Information and System Security 5, 4 (Nov. 2002), 438-457.
7. Gordon, L. and Loeb, M. A framework for using information security as a response to competitor analysis systems. Commun. ACM 44, 9 (Sept. 2001), 70-75.
8. Saaty, T. The Analytic Hierarchy Process. McGraw-Hill, New York, 1980.