Optimal Spending on Cybersecurity Measures: Risk Management

This book explores the strategic decisions made by organizations when implementing cybersecurity controls and leverages economic models and theories from the economics of information security and risk-management frameworks. It provides insight into organizational risk-management processes and how decisions on cybersecurity spending vary depending on stakeholders. It presents an innovative approach to assess cybersecurity initiatives with a risk-management perspective and leverages a data-centric focus on the evolution of cyber-attacks.

Format: Hardback
Length: 156 pages
Publication date: 26 July 2021
Publisher: Taylor & Francis Ltd

This comprehensive book delves into the intricate realm of strategic decision-making in the realm of cybersecurity, encompassing the implementation of robust controls and the integration of economic models and theories from the fields of information security and risk management. Through a unique and groundbreaking research endeavor, this book offers invaluable insights into the risk-management processes employed by organizations in assessing cybersecurity investments. It sheds light on how theoretical models and frameworks, often relying on specific scenarios or controlled conditions, shape decisions regarding cybersecurity spending within organizations, particularly in the context of the available funding compared to the recommended security measures required for compliance.

Understanding the complex trade-off between the costs of implementing security measures and the potential benefits they yield is a challenging task, as it requires a nuanced assessment. Consequently, business leaders may exhibit biases when making decisions about allocating resources to cybersecurity initiatives. To address this challenge, the author presents an innovative approach that incorporates a risk-management perspective, leveraging a data-centric focus on the evolution of cyber-attacks.

This book is a valuable resource for business school students and technology professionals with a keen interest in risk management, providing a comprehensive and insightful exploration of the critical decisions involved in cybersecurity. By examining the interplay between economic models, risk management frameworks, and cybersecurity practices, it offers valuable guidance for professionals seeking to enhance their understanding of the complex dynamics shaping the cybersecurity landscape.

Weight: 326g
Dimension: 143 x 222 x 18 (mm)
ISBN-13: 9781032061405