Profit-maximizing firm investments in customer information security

Decision Support Systems

Volumn 51, Issue 4, 2011, Pages 904-920

  Lee, Yong Jick ^a   Kauffman, Robert J ^b,c   Sougstad, Ryan ^d  

^a ARIZONA STATE UNIVERSITY   (United States)

^b SINGAPORE MANAGEMENT UNIVERSITY   (Singapore)

^c DARTMOUTH COLLEGE   (United States)

^d AUGUSTANA COLLEGE   (United States)

Author keywords

Customer information; Financial economics; Information security; Managerial decision making; Operational risks; Risk management; Value at risk

Indexed keywords

CUSTOMER INFORMATION; FINANCIAL ECONOMICS; MANAGERIAL DECISION-MAKING; OPERATIONAL RISKS; VALUE AT RISK;

CUSTOMER SATISFACTION; DECISION MAKING; ECONOMICS; INDUSTRY; INVESTMENTS; PROFITABILITY; RISK MANAGEMENT; SALES; VALUE ENGINEERING;

SECURITY OF DATA;

EID: 80052945590     PISSN: 01679236     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.dss.2011.02.009     Document Type: Article

References (45)

1. A. Acquisti, A. Friedman, and R. Telang Is there a cost to privacy breaches? An event study D. Straub, S. Klein, Proceedings of 27th Annual International Conference on Information Systems, Milwaukee, WI 2006
2. N. Ashrafi, and J. Kuilboer Online privacy policies: an empirical perspective on self-regulatory practices Journal of Electronic Commerce in Organizations 3 4 2005 61 74 (Pubitemid 41305754)
3. N.F. Awad, and M. Krishnan The personalization privacy paradox: an empirical evaluation of information transparency and the willingness to be profiled online for personalization MIS Quarterly 30 1 2006 13 28 (Pubitemid 44971423)
4. Basel Committee on Banking Supervision Operational Risk, Bank for International Settlements, Basel, Switzerland 2001
5. P.W. Best Implementing Value at Risk 1998 John Wiley and Sons New York, NY
6. H. Cavusoglu, B. Mishra, and S. Raghunathan The effect of Internet security breach announcements on market value: capital market reactions for breached firms and Internet security developers International Journal of Electronic Commerce 9 1 2004 69 104 (Pubitemid 39444049)
7. B. Crothers, Intel finds stolen laptops can be costly, Nanotech - The circuits blog, CNET News, San Francisco, CA, April 22, 2009, news.cnet.com/8301-13924-3-10225626-64.html?tag=mncol;title, current, March 1, 2011.
8. M.J. Culnan How did they get my name? An exploratory investigation of consumer attitudes toward secondary information use MIS Quarterly 17 3 1993 341 363
9. M.J. Culnan Protecting privacy online: is self-regulation working? Journal of Public Policy and Marketing 19 1 2000 20 26
10. M.J. Culnan, and P.K. Armstrong Information privacy concerns, procedural fairness, and impersonal trust: an empirical investigation Organization Science 10 1 1999 104 115
11. M.J. Culnan, and R.J. Bies Consumer privacy: balancing economic and justice considerations Journal of Social Issues 59 2 2003 323 342 (Pubitemid 36775194)
12. M.J. Culnan, and C.C. Williams How ethics can enhance organizational privacy: lessons from the ChoicePoint and TJX data breaches MIS Quarterly 33 4 2009 673 687
13. T. Dinev, and P. Hart An extended privacy calculus model for e-commerce transactions Information Systems Research 17 1 2006 61 80 (Pubitemid 43450179)
14. Federal Trade Commission Self-regulation and privacy online Prepared statement for the Subcommittee on Communications of the Committee on Commerce, Science and Transportation, United States Senate, Washington, DC, July 27, 1999 1999 www.ftc.gov/os/1999/07/privacy99.pdf current, March 1, 2011
15. F-Secure On-going targeted attacks against U.S. military contractors, blog post, San Jose, CA, January 18, 2010 www.f-secure.com/weblog/archives/ 00001859.html 2010 current, March 1, 2011
16. K.M. Gatzlaff, and K.A. McCullough The effect of data breaches on shareholder wealth Risk Management and Insurance Review 13 1 2010 61 83
17. L.A. Gordon, and M.P. Loeb The economics of information security investment ACM Transactions on Information and System Security 5 4 2002 438 457
18. V. Gurbaxani, and S.J. Whang The impact of information systems on organizations and markets Communications of the ACM 34 1 1991 59 73 (Pubitemid 21731491)
19. I. Hann, K. Hui, S.T. Lee, and I.P.L. Png Overcoming online information privacy concerns: an information processing theory approach Journal of Management Information Systems 24 2 2007 13 42
20. K.J.S. Hoo, How much is enough? A risk management approach to computer security, Ph.D. dissertation, Graduate School of Engineering, Stanford University, Palo Alto, CA, 2000.
21. K.L. Hui, H.H. Teo, S. Yong, and S.Y.T. Lee The value of privacy assurance: an exploratory field experiment MIS Quarterly 31 1 2007 19 33 (Pubitemid 46382516)
22. Internet Security Alliance Cyber security social contract, Arlington, VA, January 2010 2010 www.isalliance.org/index.php?option=com-content&task= view&id=173&Itemid=335 current, July 10, 2010
23. P. Jorion Value at Risk: The Benchmark for Controlling Market Risk 3rd Ed. 2007 McGraw-Hill Professional Book Group Blacklick, OH
24. R.J. Kauffman, and R. Sougstad Risk management of contract portfolios in IT services: the profit-at-risk approach Journal of Management Information Systems 25 1 2008 17 48
25. D.J. Kim, D.J. Ferrin, and H.R. Rao A trust-based consumer decision-making model in electronic commerce: the role of trust, perceived risk, and their antecedents Decision Support Systems 44 2 2008 544 564 (Pubitemid 350138190)
26. J.K. Lee, and H.R. Rao Perceived risks, counter-beliefs, and intentions to use anti-counterterrorism Web sites: an exploratory study of government-citizens online interactions in a turbulent environment Decision Support Systems 43 4 2007 1431 1449 (Pubitemid 47223475)
27. C. Liu, and K.P. Arnett An examination of privacy policies in Fortune 500 Web sites Mid-American Journal of Business 17 1 2002 13 21
28. N.K. Malhotra, S.S. Kim, and J. Agarwal Internet users' information privacy concerns: the construct, the scale, and a causal model Information Systems Research 15 4 2004 336 355 (Pubitemid 40192456)
29. A. Mas-Colell, M.D. Whinston, and J.R. Green Microeconomic Theory 1995 Oxford University Press New York, NY
30. G.R. Milne, A.J. Rohm, and S. Bahl Consumers' protection of online privacy and identity Journal of Consumer Affairs 38 2 2004 217 232 (Pubitemid 39666076)
31. Open Security Foundation Data loss statistics, Glen Allen, VA, July 10, 2010 www.dataloss.org current, March 1, 2011.
32. B. Otjacques, P. Hitzelberger, and F. Feltz Interoperability of e-government information systems: issues of identification and data sharing Journal of Management Information Systems 23 4 2007 29 52
33. G.A. Paleologo Price-at-risk: a methodology for pricing utility computing services IBM Systems Journal 43 1 2004 20 31
34. H.H. Panjer Operational Risks: Modeling Analytics 2006 John Wiley and Sons Hoboken, NJ
35. P.A. Pavlou, H. Liang, and Y. Xue Understanding and mitigating uncertainty in online exchange relationships: a principal-agent perspective MIS Quarterly 31 1 2007 105 136
36. PayPal PayPal security key, San Jose, CA www.paypal.com/cgi-bin/webscr? cmd=xpt/Marketing-CommandDriven/securitycenter/PayPalSecurityKey-outside 2010 current, March 1, 2011
37. PriceWaterhouseCoopers Safeguarding the new currency of business: findings from the 2008 Global State of Information Security Study White paper 2008 Security Advisory Services New York, NY
38. Privacy Rights Clearinghouse Chronology of data breaches: security breaches 2005-present, San Diego, CA, July 7, 2010 www.privacyrights.org/ar/ ChrondataBreaches.htm 2010 current, March 1, 2011
39. K.S. Schwaig, G.C. Kane, and V.C. Storey Compliance to the Fair Information Practices: how are the Fortune 500 handling online privacy disclosures? Information Management 43 7 2006 805 820 (Pubitemid 44548297)
40. H.J. Smith, S.J. Milberg, and S.J. Burke Information privacy: measuring individuals' concerns about organizational practices MIS Quarterly 20 2 1996 167 196
41. G.J. Stigler The economics of information Journal of Political Economy 69 3 1961 213 225
42. Sungard Availability Services Customer success story: the NYBOT wanted to improve its information availability capabilities to provide uninterrupted operations, Case study, Wayne, PA, 2008 www.availability.sungard.com/Documents/ NYBOT%20CaseStudy.pdf current, July 10, 2010
43. N.N. Taleb The Black Swan: The impact of the Highly Improbable 2007 Random House New York, NY
44. C. Van Slyke, J.T. Shim, R. Johnson, and J. Jiang Concern for information privacy and online consumer purchasing Journal of the Association for Information Systems 7 6 2006 415 443
45. J. Wang, A. Chaudhury, and H.R. Rao A value-at-risk approach to information security investment Information Systems Research 19 1 2008 102 120