A model for evaluating IT security investments

2004/07/01 by Huseyin Cavusoglu, Birendra Mishra, Birendra K. Mishra +1 · 361 citations
Computer Science · Engineering · #Citation #Computer science #Computer security #Cybercrime and Law Enforcement Studies #Engineering #Information and Cyber Security #Library science #Network Security and Intrusion Detection #Operations research

paper · doi:10.1145/1005817.1005828

published in Communications of the ACM 47(7), 87-92 (Association for Computing Machinery)

openalex publication_date 2004/07/01 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/29

Abstract

article A model for evaluating IT security investments Authors: Huseyin Cavusoglu Tulane University, New Orleans, LA Tulane University, New Orleans, LAView Profile , Birendra Mishra The University of California at Riverside The University of California at RiversideView Profile , Srinivasan Raghunathan The University of Texas at Dallas, Richardson, TX The University of Texas at Dallas, Richardson, TXView Profile Authors Info & Claims Communications of the ACMVolume 47Issue 7July 2004 pp 87–9210.1145/1005817.1005828Published:01 July 2004Publication History 198citation7,535DownloadsMetricsTotal Citations198Total Downloads7,535Last 12 Months267Last 6 weeks87 Get Citation AlertsNew Citation Alert added!This alert has been successfully added and will be sent to:You will be notified whenever a record that you have chosen has been cited.To manage your alert preferences, click on the button below.Manage my AlertsNew Citation Alert!Please log in to your account Save to BinderSave to BinderCreate a New BinderNameCancelCreateExport CitationPublisher SiteGet Access

Cited by

• The Influence of Ethical Beliefs and Attitudes, Norms, and Prior Outcomes on Cybersecurity Investment Decisions
• Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness1
• An economic analysis of the optimal information security investment in the case of a risk-averse firm
• Economics of information security investment in the case of concurrent heterogeneous attacks with budget constraints
• Cybersecurity Economic Issues: Clearing the Path to Good Practice
• Decision-Theoretic and Game-Theoretic Approaches to IT Security Investment
• Personal data disclosure and data breaches: the customer's viewpoint
• A probabilistic relational model for security risk analysis
• Estimating the Contextual Risk of Data Breach: An Empirical Approach
• A taxonomy of cybersecurity economic models
• Systematically Understanding Cybersecurity Economics: A Survey
• An Evolutionary Game-Theoretic Approach for Assessing Privacy Protection in mHealth Systems. [europepmc]
• Analyzing medical device connectivity and its effect on cyber security in german hospitals. [europepmc]

Related

• ASwatch
• Forum
• Review of "Complexity and Cryptography: An Introduction by John Talbot and Dominic Welsh", Cambridge University Press, 2006, 292 pages
• The productivity paradox of information technology
• Where is IT in Information Security? The Interrelationship among IT Investment, Security Awareness, and Data Breaches