
Managing Cyber-Security Resources
A Cost-Benefit Analysis
Lawrence A. Gordon, Martin P. Loeb - Collection Homeland Security/Information Systems
Résumé
Cost-benefit guidelines for efficiently allocating scarce resources to your organization's cybersecurity program
Cybersecurity breaches are a fact of life in today's interconnected world and the financial and business impact of unauthorized intrusions can be devastating. But how can you know if your firm is committing too much money, or not enough, to protect itself against such unseen hazards?
Managing Cybersecurity Resources provides you with hands-on analysis and answers on this vital question. An invaluable resource for information security managers tasked with establishing cybersecurity initiatives as well as financial managers who must determine how much to allocate to such initiatives, this focused yet wide-ranging book details:
- Models that quantify precisely how firms should decide on the right amount to spend on cybersecurity
- Concepts and empirical evidence for assessing the real costs of cybersecurity breaches
- Strategies for minimizing the impact of negative incidents on company valuation
The Internet is one of the great innovations of the past century. As with all innovations, it presents its users with both unprecedented opportunities and unavoidable perils. Managing Cybersecurity Resources outlines a cost-benefit framework for protecting your organization against the invasion of its information network while leaving you with the resources you need to compete and grow.
L'auteur - Lawrence A. Gordon
Lawrence A. Gordon, Ph. D., is the Ernst & Young Alumni Professor of Managerial Accounting and Information Assurance at the University of Maryland's Smith School of Business. Gordon is one of the world's leading experts and frequent speakers on the subjects of cybersecurity economics, capital investments, cost management systems, and performance measures. He is also the editor-in-chief of the Journal of Accounting and Public Policy.
L'auteur - Martin P. Loeb
Martin P. Loeb, Ph.D., a professor of accounting and information assurance at the University of Maryland's Robert H. Smith School of Business, is also an affiliate professor at the University of Maryland Institute for Advanced Computer Studies. Loeb's research on information security economics, mechanism design, and incentive regulation is internationally recognized and has been published in leading academic journals in economics, computer science, and accounting.
Sommaire
- Preface
- Acknowledgments
- Introduction
- A Cost-Benefit Framework for Cybersecurity
- The Costs and Benefits Related to Cybersecurity Breaches
- The Right Amount to Spend on Cybersecurity
- Risk Management and Cybersecurity
- The Business Case for Cybersecurity
- Cybersecurity Auditing
- Cybersecurity's Role in National Security
- Concluding Comments
- Glossary
- Acronyms
- References
- Selected Annotated Bibliography
- Index
Caractéristiques techniques
PAPIER | |
Éditeur(s) | Mc Graw Hill |
Auteur(s) | Lawrence A. Gordon, Martin P. Loeb |
Collection | Homeland Security/Information Systems |
Parution | 31/05/2005 |
Nb. de pages | 222 |
Format | 15,5 x 23,5 |
Couverture | Relié |
Poids | 493g |
Intérieur | Noir et Blanc |
EAN13 | 9780071452854 |
ISBN13 | 978-0-07-145285-4 |
Avantages Eyrolles.com
Nos clients ont également acheté
Consultez aussi
- Les meilleures ventes en Graphisme & Photo
- Les meilleures ventes en Informatique
- Les meilleures ventes en Construction
- Les meilleures ventes en Entreprise & Droit
- Les meilleures ventes en Sciences
- Les meilleures ventes en Littérature
- Les meilleures ventes en Arts & Loisirs
- Les meilleures ventes en Vie pratique
- Les meilleures ventes en Voyage et Tourisme
- Les meilleures ventes en BD et Jeunesse
- Informatique Informatique d'entreprise Sécurité
- Informatique Réseaux et télecommunications Ouvrages généraux
- Informatique Réseaux et télecommunications Protocoles et standards
- Informatique Réseaux et télecommunications Administration réseau
- Informatique Réseaux et télecommunications Sécurité réseau
- Informatique Réseaux et télecommunications Sécurité réseau Sécurité internet