Loading...

Media is loading
 

Paper Type

Complete

Description

Cyber-attacks can cause severe economic damages to businesses today. Therefore, every company needs to protect its IT systems from such attacks by implementing effective IT security measures. When it comes to deciding on an IT security measure, there is a variety of decision approaches that can offer support on choosing an economically reasonable one. In practice, however, such approaches are rarely applied and a company’s security investment decisions are often based on intuitive factors. We therefore want to explore which factors drive the acceptance and application of economic approaches on IT security investment decisions. For this, we used semi-structured interviews and a moderated focus group to generate insights from both science and practice. Not only did our research yield new scientific knowledge about IT security investment decisions, but the results can also be useful in increasing the application of economic decision approaches.

Paper Number

1465

Comments

SIG SEC

Share

COinS
 
Aug 10th, 12:00 AM

A Qualitative Study on Acceptance Factors of Economic Approaches on IT Security Investment Decisions

Cyber-attacks can cause severe economic damages to businesses today. Therefore, every company needs to protect its IT systems from such attacks by implementing effective IT security measures. When it comes to deciding on an IT security measure, there is a variety of decision approaches that can offer support on choosing an economically reasonable one. In practice, however, such approaches are rarely applied and a company’s security investment decisions are often based on intuitive factors. We therefore want to explore which factors drive the acceptance and application of economic approaches on IT security investment decisions. For this, we used semi-structured interviews and a moderated focus group to generate insights from both science and practice. Not only did our research yield new scientific knowledge about IT security investment decisions, but the results can also be useful in increasing the application of economic decision approaches.

When commenting on articles, please be friendly, welcoming, respectful and abide by the AIS eLibrary Discussion Thread Code of Conduct posted here.