Security: Valuing Increased Overhead Costs

Author:
Tony Coulson, Jake Zhu, Kurt Collins, Walter Stewart, C.E. Tapie Rohm
File Size:
88.91 kB
Date:
01 July 2006
Downloads:
697 x

The recent implementation of security and privacy regulations have increased the operational overhead of organizations. The authors attempt to identify challenges valuing information security investments by examining three primary approaches to measuring information value: Normative, Perceived and Real. Literature is reviewed and the approaches are examined in terms of their strengths and weaknesses in providing value measurements for secure information systems. A framework is presented to suggest at what level in an organization and in what situations these information value approaches are most suitable.

Security: Valuing Increased Overhead Costs