Economics of ITSecurity Management: Four Improvements to Current Security Practices

No abstract is available for this paper.

• Publication year

  2004

• Venue

  Communications of the Association for Information Systems

• Publication date

  2004-07-27

• Fields of study

  Business, Computer Science, Economics

• Identifiers
  DOI 10.17705/1CAIS.01403
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Network Security Assessment

  2004cited by this paper
• Configuration of Detection Software: A Comparison of Decision and Game Theory Approaches

  2004influential reference
• The Effect of Internet Security Breach Announcements on Market Value: Capital Market Reactions for Breached Firms and Internet Security Developers

  2004cited by this paper
• A model for evaluating IT security investments

  2004cited by this paper
• Toward cost-sensitive modeling for intrusion detection and response

  2002cited by this paper
• The Effect of Internet Security Breach Announcements on Market Value of Breached Firms and Internet Security Developers

  2002cited by this paper
• Optimal Design of Information Technology Security Architecture

  2002cited by this paper
• CSI/FBI computer crime and security survey

  2001cited by this paper
• State of the Practice of Intrusion Detection Technologies

  2000cited by this paper
• The base-rate fallacy and the difficulty of intrusion detection

  2000cited by this paper
• Editor's preface

  1994cited by this paper
• Novell Inc.

  1993cited by this paper
• The Adjustment of Stock Prices to New Information

  1969cited by this paper

• La ciberseguridad como prioridad empresarial dentro de marcos los regulatorios y normativos internacionales

  2025cites this paper
• Assessing IoT intrusion detection computational costs when using a convolutional neural network

  2025cites this paper
• Understanding employee vulnerability to cyberattacks using the lens of strategic human resource management

  2025cites this paper
• Cyberattack, cyber risk mitigation capabilities, and firm productivity in Kenya

  2024cites this paper
• RCVaR: an Economic Approach to Estimate Cyberattacks Costs using Data from Industry Reports

  2023cites this paper
• Toward enhancing the information base on costs of cyber incidents: implications from literature and a large-scale survey conducted in Germany

  2022cites this paper
• Does Technostress Trigger Insider Threat? A Conceptual Model and Mitigation Solutions

  2021cites this paper
• Understanding the adoption of cyber insurance for residual risks - An empirical large-scale survey on organizational factors of the demand side

  2021cites this paper
• Does internet security matter for foreign direct investment? A spatial econometric analysis

  2021cites this paper
• Affirmative and silent cyber coverage in traditional insurance policies: Qualitative content analysis of selected insurance products from the German insurance market

  2020cites this paper
• IT Risk Factor Disclosure and Stock Price Crashes

  2020cites this paper
• Integrating cost-benefit analysis into the NIST Cybersecurity Framework via the Gordon-Loeb Model

  2020cites this paper
• Information Systems Security Leadership: An Empirical Study of Behavioral Influences of Leaders on Employees’ Security Compliance

  2020cites this paper
• The Effect of Rational Based Beliefs and Awareness on Employee Compliance with Information Security Procedures: A Case Study of a Financial Corporation in Israel

  2020cites this paper
• Critical analysis of the key challenges associated with information security and GDPR and its impact on the cloud computing analysts

  2019cites this paper
• An Empirical Study of The Indirect Effects of the Perceived Ac-cessibility and Cyber Security of Mobile Banking Applications on User Loyalty to the Applications

  2019cites this paper
• Modeling the adoption of cloud computing to assess South African SMEs: An integrated perspective

  2019cites this paper
• Security and Privacy Issues in Cloud-Based E-Government

  2019cites this paper
• Factors affecting information security behavior of employees : a case study

  2019cites this paper
• ePubWU Institutional Repository

  2019cites this paper
• Demographic Factors in Cyber Security: An Empirical Study

  2019cites this paper
• Inside the Organization: Why Privacy and Security Engineering Is a Challenge for Engineers

  2019cites this paper
• Escalation of commitment as an antecedent to noncompliance with information security policy

  2018cites this paper
• Assessing IT availability risks in smart factory networks

  2018cites this paper
• Security Related Information Sharing among Firms: Potential Theoretical Explanations

  2018cites this paper
• Herausforderungen und Implikationen für das Cyber-Risikomanagement sowie die Versicherung von Cyberrisiken – Eine empirische Analyse

  2018cites this paper
• SNS Use, Risk, and Executive Behavior

  2018cites this paper
• Information security management practices in organisations

  2018cites this paper
• Understanding information security strategy in organisations

  2018cites this paper
• An Organizational Level Advancement Ofmis and Its Security Milestones Intechnological Era

  2018cites this paper
• Herausforderungen und Implikationen für das Cyber-Risikomanagement sowie die Versicherung von Cyberrisiken – Eine empirische Analyse

  2018cites this paper
• AIS Electronic Library (AISeL) An Information Systems Security Framework

  2017cites this paper
• Beyond Cybersecurity Awareness: Antecedents and Satisfaction

  2017cites this paper
• A Study of Employees’ Information Security Policy Violation and Rational Choice Theory

  2017cites this paper
• Escalation of commitment and information security: theories and implications

  2017cites this paper
• Human Behavior , and Theories inOrganizational Studies

  2017cites this paper
• Introducing cybernomics: A unifying economic framework for measuring cyber risk

  2017cites this paper
• European Conference on Information Systems ( ECIS ) 2005 Methodologies for Evaluating Information Security Investments-What Basel II Can Change in the Financial Industry

  2017cites this paper
• Australasian Conference on Information Systems Horne et al . 2016 , Wollongong , Australia A Theory on Information Security 1 A Theory on Information Security

  2016cites this paper
• The Effect of Information Security Certification Announcement on the Market Value of Firms

  2016cites this paper
• Managing security risks for inter-organisational information systems: a multiagent collaborative model

  2016cites this paper
• A Theory on Information Security

  2016cites this paper
• Understanding the Impact of Hacker Innovation upon IS Security Countermeasures

  2016cites this paper
• Collective information structure model for Information Security Risk Assessment (ISRA)

  2015cites this paper
• Risk, Human Behavior, and Theories in Organizational Studies

  2015cites this paper
• Information Security Awareness of the Senior Teacher Students: Sakarya University Sample

  2015cites this paper
• A Study on Categorization of Accident Pattern for Organization’s Information Security Strategy Establish

  2015cites this paper
• The Causal Relationship between Information Security Countermeasures and Information System Misuse

  2015cites this paper
• Explore Awareness of Information Security: Insights from Cognitive Neuromechanism

  2015cites this paper
• How Data Breaches Ruin Firm Reputation on Social Media! - Insights from a Sentiment-based Event Study

  2015cites this paper
• Rethinking FS-ISAC: An IT Security Information Sharing Network Model for the Financial Services Sector

  2014cites this paper
• Framing Information Security Budget Requests to Influence Investment Decisions

  2014cites this paper
• Studies on the effect of information security investment executive

  2014cites this paper
• A Framework for Making Decision on Optimal Security Investment to the Proactive and Reactive Security Solutions management

  2014cites this paper
• Multiple Case Study Approach to Identify Aggravating Variables of Insider Threats in Information Systems

  2014cites this paper
• Understanding organisational response to institutional pressures in information security management : two Chinese case studies

  2014cites this paper
• An Economic Analysis of Security Investment in Information Systems with Security Threats: A Stochastic Approach

  2013cites this paper
• An Experimental Study to Explore Attacker Response to Changes in Security and Reward

  2013cites this paper
• Culture Matters: Factors Affecting the Adoption of Telemedicine

  2013cites this paper
• Assessing Self-Justification as an Antecedent of Noncompliance with Information Security Policies

  2013cites this paper
• Framing Information Security Budget Requests to Maximize Investments

  2013cites this paper
• A Study on the Measurement Method of Personal Information Protection Investment Performance

  2013cites this paper
• Framing Information Security Budget Requests to Maximize Investments

  2013cites this paper
• RETHINKING FS-ISAC : AN IT SECURITY INFORMATION SHARING MODEL FOR THE FINANCIAL SERVICES SECTOR

  2013cites this paper
• A Conceptual Analysis about the Organizational Impact of Compliance on Information Security Policy

  2012cites this paper
• Prospect Theory and Information Security Investment Decisions

  2012cites this paper
• Moral Reasoning in Computer-Based Task Environments: Exploring the Interplay between Cognitive and Technological Factors on Individuals’ Propensity to Break Rules

  2012cites this paper
• To Invest or Not to Invest? Assessing the Economic Viability of a Policy and Security Configuration Management Tool

  2012cites this paper
• An analysis on effects of information security investments: a BSC perspective

  2012cites this paper
• The Contemporary Plagiarist: The Roles of Technology and Moral Development

  2011cites this paper
• Making Sound Security Investment Decisions

  2010cites this paper
• Protection-motivated behaviors of organizational insiders

  2010cites this paper
• Using Real Option Thinking to Improve Decision Making in Security Investment

  2010cites this paper
• Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness

  2010cites this paper
• Measuring Effectiveness of Information Systems Security: An Empirical Research

  2009cites this paper
• Current State of Information Security Research In IS

  2009cites this paper
• The Economic Ramifications of Strategic IT Security Information Sharing in the Financial Services Industry

  2009cites this paper
• Multidimensional Management of Information Security – A Metrics Based Approach Merging Business and Information Security Topics

  2009cites this paper
• Security Patch Management: Share the Burden or Share the Damage?

  2008cites this paper
• BORIS - Business-Oriented Management of Information Security

  2008cites this paper
• Analysing and determining Return on Investment for Information Security

  2008cites this paper
• A Study on Information Security Investment by the Analytic Hierarchy Process

  2008cites this paper
• The Common Body of Knowledge: A Framework to Promote Relevant Information Security Research

  2007cites this paper
• Efficiency of Vulnerability Disclosure Mechanisms to Disseminate Vulnerability Knowledge

  2007cites this paper
• A critical balance: collaboration and security in the IT-enabled supply chain

  2007cites this paper
• Applying Real Options Thinking to Information Security in Networked Organizations

  2006cites this paper
• Ein Steuerungsmodell für das Management von IV-Sicherheitsrisiken bei Kreditinstituten

  2005cites this paper
• Artificial Intelligence in Information Security: Exploring the Advantages, Challenges, and Future Directions

  year unknowncites this paper