An Overview of Economic Approaches to Information Security Management
Xiaomeng Su · 2006
Abstract. The increasing concerns of clients, particularly in online com-merce, plus the impact of legislations on information security have com-pelled companies to put more resources in information security. As a re-sult, senior managers in many organizations are now expressing a much greater interest in information security. However, the largest body of re-search related to preventing breaches is technical, focusing on such issues as encryption and access control. In contrast, research related to the eco-nomic aspects of information security is small but rapidly growing. The goal of this technical note is twofold: i) to provide the reader with an structured overview of the economic approaches to information security and ii) to identify potential research directions. 1