Risk Management and Investment
From Cybersecurity Wiki
Anderson, Ross (2001) Why Information Security is Hard
Anderson, Ross and Moore, Tyler (2006) The Economics of Information Security
Varian, Hal (2000) Managing Online Security Risks