Managing Information Risk and the Economics of Security

Full Title of Reference

Managing Information Risk and the Economics of Security

Full Citation

M. Eric Johnson, Managing Information Risk and the Economics of Security (2008). Purchase

BibTeX

Categorization

• Overview: Books
• Threats and Actors: Financial Institutions and Networks; States
• Issues: Cybercrime; Economics of Cybersecurity; Incentives; Information Sharing/Disclosure; Insurance; Risk Management and Investment
• Approaches: Deterrence; Regulation/Liability

Key Words

Antivirus, Botnet, Cyber Crime, Cyber Security as an Externality, Disclosure Policy, Information Asymmetries, Malware, Notice and Take-down, Patching, Phishing, Risk Modeling, SPAM, State Affiliation, Tragedy of Commons, Transparency

Synopsis

TThe lifeblood of the global economy, information has become a source of growing risk as more firms maintain information online. With risks now fueled by sophisticated, organized, malicious groups, information security requires not only technology, but a clear understanding of potential risks, decision-making behaviors, and metrics for evaluating business and policy options.

Managing Information Risk and the Economics of Security, an edited volume contributed by well-established researchers in the field worldwide, presents the latest research on economics driving both the risks and the solutions. Covering the implications of policy within firms and across countries, this volume provides managers and policy makers with new thinking on how to manage risk.

Managing Information Risk and the Economics of Security is designed for managers, policy makers, and researchers focusing on economics of information security, as well as for advanced-level students in computer science, business management and economics.

Additional Notes and Highlights

Table of Contents

Index