2004 CSI/FBI computer crime and security survey

Computer Security Journal

Volumn 20, Issue 3, 2004, Pages 33-51

  Gordon, Lawrence A ^a   Loeb, Martin P ^a   Lucyshyn, William ^b   Richardson, Robert ^c  

^a UNIVERSITY OF MARYLAND   (United States)

^b UNIVERSITY OF MARYLAND   (United States)

^c NONE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIMES; COMPUTER SECURITY INSTITUTE (CSI); SECURITY SURVEY;

COMPUTER ARCHITECTURE; COMPUTER PROGRAM LISTINGS; CONTROL SYSTEMS; COSTS; CRYPTOGRAPHY; INFORMATION MANAGEMENT; INFORMATION TECHNOLOGY; SECURITY OF DATA;

COMPUTER SYSTEMS;

EID: 4944232725     PISSN: 02770865     EISSN: None     Source Type: Trade Journal    
DOI: None     Document Type: Review

References (5)

1. For an overview of the impact of economics on information security, see Lawrence A. Gordon and Robert Richardson, "The New Economics of Information Security," Information Week, March 29, 2004, pp. 53-56.
2. For a discussion of the limitations of ROI, see Lawrence A. Gordon and Martin P. Loeb, "Return on Information Security Investments: Myths vs. Reality," Strategic Finance, November 2002, pp. 26-31.
3. For examples of such insurance firms and further analysis of cybersecurity insurance, see Lawrence A. Gordon, Martin P. Loeb Gordon, and Tashfeen Sohail, "A Framework for Using Insurance for Cyber Risk Management," Communications of the ACM, March 2003, pp. 81-85.
4. This is consistent with recent research by Katherine Campbell, Lawrence A. Gordon, Martin P. Loeb, and Lei Zhou ("The Economic Cost of Publicly Announced Information Security Breaches: Empirical Evidence from the Stock Market," Journal of Computer Security, Vol. 11, No. 3, 2003, pp. 431-448) that found reports of security breaches can adversely affect a firm's stock price.
5. See Lawrence A. Gordon, Martin P. Loeb Gordon, and William Lucyshyn, "Sharing Information on Computer Systems: An Economic Analysis," Journal of Accounting and Public Policy, Vol. 22, No. 6, 2003, pp. 461-485.