According to the CERT Coordination Center, which has been collecting data on cyber (meaning Internet) security incidents since 1988, security breaches have been on a dramatic rise. In 1998, 3734 security-related incidents were reported; in the first three quarters of 2003 alone the number of breaches was at an all-time high of 114,855. Cyber and information security has become one of the number one issues facing corporations today. Breaches are not only costly but as the authors research shows can also affect a stock price. And in the age of terrorism, numerous government agencies have also become interested in cyber and information security in a big way. Given the high stakes of today's information security decisions, a framework for sound decision-making using such tools as cost-benefit analysis is needed. The Management of Information Security presents a framework using financial management guidelines allowing organizations to efficiently manage information security resources. The authors' research has propelled them as leaders in this area and they have been sought out by numerous government agencies and corporations (see attached list).
Gordon and Loeb help managers and executives answer key questions that surround the decision-making process when determining how to allocate resources for information security purposes. Readers will find information on such topics as: How do firms deal with financial constraints? What models can firms use to determine how much to spend on security? How much information sharing can a firm conduct without losing competitive advantage? While other aspects of financial management have long been in place, few firms are prepared to tackle the issue of allocating resources for security purposes. As the leading names in the area, Gordon & Loeb share crucial information with managers and executives charged with managing the resources for this critical area.
Buy Managing Cybersecurity Resources book by Lawrence A. Gordon from Australia's Online Bookstore, Boomerang Books.
(231mm x 157mm x 22mm)
Publisher: McGraw-Hill Education - Europe
Country of Publication:
Author Biography - Lawrence A. Gordon
Lawrence A. Gordon, Ph. D., is the Ernst & Young Alumni Professor of Managerial Accounting and Information Assurance, at the University of Maryland's Smith School of Business. Gordon is one of the world's leading experts and frequent speaker on the subjects of cybersecurity economics, capital investments, cost management systems and performance measures. He is also the Editor-in-Chief of the Journal of Accounting and Public Policy. Martin P. Loeb, Ph.D., a professor of accounting and information assurance at the University of Maryland's Robert H. Smith School of Business, is also an affiliate professor at the University of Maryland Institute for Advanced Computer Studies. Loeb's research on information security economics, mechanism design, and incentive regulation is internationally recognized, and has been published in leading academic journals in economics, computer science, and accounting.