Info Sec Overview for managers and policy makers<\/p>\n
Revisit Bruce Schneier’s presentation in Module 2. This time, please focus on his discussions on cost\/benefit analysis.
\nSchneier, B. (2008). What are the implications of spying? CCTV interview with Bruce Schneier. Retrieved from https:\/\/www.youtube.com\/watch?v=Ar67N94NYr0<\/p>\n
If you don’t have access to the presentation, then simply read his article mentioned in Module 2. The article is:<\/p>\n
Schneier, Bruce. The Psychology of Security. http:\/\/www.schneier.com\/essay-155.html<\/p>\n
The following article provides an example how such a cost\/benefit analysis is considered.<\/p>\n
Schneier, Bruce. Security at What Cost? National ID System Is Not Worth The $23 Billion Price Tag.http:\/\/www.schneier.com\/essay-207.html.<\/p>\n
The following article uses some typical accounting measurements for economics of information security.<\/p>\n
Gordon, L. A., & Richardson, R. (2004). The New Economics of Information Security. Optimize. April, 83\ufffd\ufffd\ufffd86. (Trident Online Library: ProQuest)<\/p>\n
The following article recaps what we talked about perceptions of security. More importantly, it discusses how people generally do not perceive gains and costs equally.<\/p>\n
When you conduct a cost\/benefit analysis of security, you should keep that in mind.<\/p>\n
West, R. (2008). The psychology of security. Communications of the ACM, Apr, 51(4), 34\ufffd\ufffd\ufffd40.<\/p>\n
Incentive Design
\nThe economics of information security is not only about cost\/benefit analysis of implementing a security measure. Another major topic in economics is mechanism design,<\/p>\n
which provides principles and methods (like game theory) to help design incentive-compatible mechanisms that ensure participants are better off behaving honestly than<\/p>\n
dishonestly. See the following article to get a peek:<\/p>\n
The Economist. (2007) Intelligent Design. Oct 18th, 2007.http:\/\/www.economist.com\/finance\/displaystory.cfm?story_id=9988840<\/p>\n
To know more about the three Nobel Prize winners in 2007 economics division, surfhttp:\/\/nobelprize.org\/nobel_prizes\/economics\/laureates\/2007\/ and check them out.<\/p>\n
It is not easy to understand the revelation principle or the incentive-compatible design. I introduce you the concepts here for the purpose of making you aware of such<\/p>\n
a method. It takes time to learn how to design a game (a mechanism) that every party is better off by being honest.<\/p>\n
Well, on a lighter note. Interestingly, a movie called “Mad Money” tells a story of three female employees of the Federal Reserve Bank stealing money that is about to<\/p>\n
be shredded. It is not a movie that I recommend to watch a second time, but it is entertaining enough to watch once. The movie is also a fit for the educational<\/p>\n
purpose here. I suggest you watch it once when you get a chance during this term, and pay special attention to the human factors — especially the incentives of the<\/p>\n
thieves and the Chief Security Officer.<\/p>\n
Other Economics Issues as to Security
\nAs a matter of fact, there are many aspects in applying economics to information security. The following article has mentioned a list of authors that research<\/p>\n
economics of information security and provided a brief overview of their research:<\/p>\n
Anderson R. and Schneier B., (2005) Economics of Information Security, IEEE Security and Privacy 3 (1), 2005, pp. 12-13. (Retrieved May 19, 2008).<\/p>\n
To know more in depth, you can choose to view the video (optional):<\/p>\n
Simonyi Konferencia 2011 – Economics of Information Security and Privacy. Retrieved fromhttp:\/\/www.youtube.com\/watch?v=fSfH80DY6S4<\/p>\n
You are probably overwhelmed now with all these economics. I hope you also have broadened your views on security and have said “wow” to yourself that now you hold a<\/p>\n
much broader view on security and how to approach it from economic perspective.<\/p>\n
Please write a 4- to 6-page paper discussing what you have learned:<\/p>\n
What are the economic considerations of information security and its management?<\/p>\n
In preparing your paper, you need to discuss the following issues, and support with arguments and evidence:<\/p>\n
What are the major economic considerations in information security and management?
\nAre these economic considerations serving their purposes?
\nWhy do these economic measures help?
\nDiscuss economic mechanisms that can improve information security and management.
\nProvide a comparative table of the economic measures that you discussed.
\nLength: Minimum 4\ufffd\ufffd\ufffd6 pages excluding cover page and references (since a page is about 300 words, this is approximately 1,200 words<\/p>\n","protected":false},"excerpt":{"rendered":"
Info Sec Overview for managers and policy makers Revisit Bruce Schneier’s presentation in Module 2. This time, please focus on his discussions on cost\/benefit analysis. Schneier, B. (2008). What are the implications of spying? CCTV interview with Bruce Schneier. Retrieved Read More …<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-5787","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/posts\/5787","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/comments?post=5787"}],"version-history":[{"count":0,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/posts\/5787\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/media?parent=5787"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/categories?post=5787"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.benedictsol.com\/blogs\/wp-json\/wp\/v2\/tags?post=5787"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}