Need to justify IT security? Measure your risk!
Timothy Iijima, Jeffrey Curtis · Journal of Corporate Accounting & Finance · 2004
Abstract Most companies realize that IT‐related business risk is substantial. But few rigorously analyze and quantify that risk. So it's tough to justify a given expense for IT security. The authors show how to measure that risk—and decide if your security actions are adequate. © 2004 Wiley Periodicals, Inc.