Returns to information security investment: Endogenizing the expected loss

Information Systems Frontiers

Volumn 16, Issue 2, 2014, Pages 329-336

  Hausken, Kjell ^a  

^a UNIVERSITY OF STAVANGER   (Norway)

Author keywords

Information production; Information protection; Returns assumptions; Security investment

Indexed keywords

MULTI AGENT SYSTEMS; SECURITY OF DATA;

BREACH PROBABILITY; INFORMATION PRODUCTION; INFORMATION PROTECTION; INFORMATION SECURITY INVESTMENT; PRODUCTION EFFORTS; RETURNS ASSUMPTIONS; SECURITY ENVIRONMENTS; SECURITY INVESTMENTS;

INVESTMENTS;

EID: 84899950097     PISSN: 13873326     EISSN: None     Source Type: Journal    
DOI: 10.1007/s10796-012-9390-9     Document Type: Article

References (4)

1. Cefaratti, M.A., Lin, H., Wallace, L. (2011). The Information Security Control Environment, Internal Auditor, The Institute of Internal Auditors Inc, Florida, http://www.theiia.org/intAuditor/feature-articles/2011/April/the- information-security-control-environment/.
2. Gordon, L. A., & Loeb, M. (2002). The economics of information security investment. ACM Transactions on Information and System Security, 5(4), 438-457.
3. Hausken, K. (2005). Production and conflict models versus rent seeking models. Public Choice, 123(1), 59-93.
4. Hausken, K. (2006). Returns to information security investment: the effect of alternative information security breach functions on optimal investment and sensitivity to vulnerability. Information Systems Frontiers, 8(5), 338-349.