Weishaeupl, Eva and Yasasin, Emrah and Schryen, Guido (2018) Information security investments: An exploratory multiple case study on decision-making, evaluation and learning. COMPUTERS & SECURITY, 77. pp. 807-823. ISSN 0167-4048, 1872-6208
Full text not available from this repository. (Request a copy)Abstract
The need to protect resources against attackers is reflected by huge information security investments of firms worldwide. In the presence of budget constraints and a diverse set of assets to protect, organizations have to decide in which IT security measures to invest, how to evaluate those investment decisions, and how to learn from past decisions to optimize future security investment actions. While the academic literature has provided valuable insights into these issues, there is a lack of empirical contributions. To address this lack, we conduct a theory-based exploratory multiple case study. Our case study reveals that (1) firms' investments in information security are largely driven by external environmental and industry-related factors, (2) firms do not implement standardized decision processes, (3) the security process is perceived to impact the business process in a disturbing way, (4) both the implementation of evaluation processes and the application of metrics are hardly existent and (5) learning activities mainly occur at an ad-hoc basis. (C) 2018 Elsevier Ltd. All rights reserved.
| Item Type: | Article |
|---|---|
| Uncontrolled Keywords: | SINGLE-LOOP; SYSTEMS; MANAGEMENT; MODELS; REQUIREMENTS; TECHNOLOGY; ECONOMICS; AWARENESS; DYNAMICS; BEHAVIOR; Information security investments; Multiple case study; Organizations; Single loop learning; Double loop learning |
| Subjects: | 300 Social sciences > 330 Economics |
| Divisions: | Business, Economics and Information Systems > Institut für Wirtschaftsinformatik > Professur für Wirtschaftsinformatik (Prof. Dr. Guido Schryen) |
| Depositing User: | Dr. Gernot Deinzer |
| Date Deposited: | 11 Mar 2020 13:38 |
| Last Modified: | 11 Mar 2020 13:38 |
| URI: | https://pred.uni-regensburg.de/id/eprint/14119 |
Actions (login required)
 |
View Item |
