Return on Security Investments – Design Principles of Measurement Systems Based on Capital Budgeting
| dc.contributor.author | Brocke, Jan vom | |
| dc.contributor.author | Strauch, Gereon | |
| dc.contributor.author | Buddendick, Christian | |
| dc.contributor.editor | Mayr, Heinrich C. | |
| dc.contributor.editor | Karagiannis, Dimitris | |
| dc.date.accessioned | 2019-05-15T09:28:52Z | |
| dc.date.available | 2019-05-15T09:28:52Z | |
| dc.date.issued | 2007 | |
| dc.description.abstract | IT-security has become a vital factor in electronic commerce nowadays. Thus, investments have to be made in order to safeguard security. However, the benefits of these investments are often hardly visible. In most cases, such investments are made only retroactively, after incidents occur. It is necessary to measure the value before preventing incidents. For this purpose ROSI (Return on Security Investments) has gained enormous attention in research and practice. In this paper, we discuss this measure from a methodological perspective. We argue that existing approaches for calculating ROSI lack a sound methodological basis and that these approaches can be misleading for decision support. In contrast to these approaches, we suggest a new approach for the calculation of ROSI on a capital budgeting basis. | en |
| dc.identifier.isbn | 978-3-88579-2017 | |
| dc.identifier.pissn | 1617-5468 | |
| dc.identifier.uri | https://dl.gi.de/handle/20.500.12116/22679 | |
| dc.language.iso | en | |
| dc.publisher | Gesellschaft für Informatik e. V. | |
| dc.relation.ispartof | Information systems technology and its applications – 6th international conference – ISTA 2007 | |
| dc.relation.ispartofseries | Lecture Notes in Informatics (LNI) - Proceedings, Volume P-107 | |
| dc.title | Return on Security Investments – Design Principles of Measurement Systems Based on Capital Budgeting | en |
| dc.type | Text/Conference Paper | |
| gi.citation.endPage | 32 | |
| gi.citation.publisherPlace | Bonn | |
| gi.citation.startPage | 21 | |
| gi.conference.date | May 23-25, 2007 | |
| gi.conference.location | Kharkiv, Ukraine | |
| gi.conference.sessiontitle | Regular Research Papers |
Dateien
Originalbündel
1 - 1 von 1