The Price of Security: The Challenge of Measuring Business Value Investments in Securing Information Systems

Authors

Tony Coulson, California State University, San Bernardino
Jake Zhu, California State University, San Bernardino
Shan Miyuan, California State University, San Bernardino
Tapie Rohm, California State University, San Bernardino

Abstract

With powerful regulations surrounding security and privacy of information, the authors attempt to identify challenges valuing information security investments. The authors examine three primary approaches to measuring information value: Perceived, Real, and Normative. Literature is reviewed and the approaches are examined in terms of their strengths and weaknesses in providing value measurements for secure information systems. A framework is presented to suggest at what level in an organization and in what situations these information value approaches are most suitable.

Recommended Citation

Coulson, Tony; Zhu, Jake; Miyuan, Shan; and Rohm, Tapie (2005) "The Price of Security: The Challenge of Measuring Business Value Investments in Securing Information Systems," Communications of the IIMA: Vol. 5: Iss. 4, Article 3.
DOI: https://doi.org/10.58729/1941-6687.1277
Available at: https://scholarworks.lib.csusb.edu/ciima/vol5/iss4/3