Academia.eduAcademia.edu

Economics of Security

description42 papers
group75 followers
lightbulbAbout this topic
The economics of security is the study of how economic principles and models apply to the provision, demand, and management of security services and policies. It examines the costs, benefits, and trade-offs associated with security measures, including the allocation of resources to prevent and respond to threats.
lightbulbAbout this topic
The economics of security is the study of how economic principles and models apply to the provision, demand, and management of security services and policies. It examines the costs, benefits, and trade-offs associated with security measures, including the allocation of resources to prevent and respond to threats.

Key research themes

1. How do economic externalities influence optimal cybersecurity investment by private firms?

This research theme investigates the underinvestment in cybersecurity by private sector firms due to the presence of externalities—costs or risks imposed on others that individual firms do not internalize. It focuses on extending economic models to quantify the gap between private and socially optimal cybersecurity spending. Understanding this helps in designing better regulatory incentives and interventions to correct market failures, enhancing collective cyber resilience.

Key finding: This paper extends the Gordon-Loeb (GL) cybersecurity investment model by incorporating externalities, and finds that from a social welfare perspective, the optimal investment level for a firm should be up to 37% higher than... Read more
Key finding: The study identifies security externalities as a fundamental economic barrier to adequate cybersecurity investment, highlighting how unprotected systems pose risks to others, leading to free-rider problems where individual... Read more
Key finding: This work discusses operationalizing risk-based financial analysis frameworks that account for the trade-offs in cybersecurity investment, emphasizing the need to align preventive and reactive controls to the business value... Read more

2. To what extent do information security professionals’ risk perceptions and behaviours deviate from expected value maximization in cybersecurity investment decisions?

This theme examines the behavioural and cognitive biases influencing cybersecurity risk assessment and investment decisions by information security professionals. It challenges the assumption that these professionals behave as rational expected value maximizers, instead revealing systematic risk and ambiguity aversion, framing effects, and tensions between security and operability preferences. This insight is crucial for improving risk assessment methodologies and organizational security investment strategies.

Key finding: Through experimental lotteries and surveys, the study finds that information security professionals exhibit risk and ambiguity aversion, do not minimize expected losses strictly, and are influenced by framing effects,... Read more
Key finding: This research experimentally confirms that security professionals consider small losses as inevitable and show distinctive risk attitudes compared to the general population; notably, their job positions influence their... Read more
Key finding: The paper proposes a decision-making framework integrating stakeholder risk perceptions and incentives, showing that misaligned economic motivators and differing risk perceptions lead to suboptimal cybersecurity investments,... Read more

3. How can cost-benefit and financial analysis methodologies improve organizational security investment decisions under economic and operational constraints?

This area focuses on applying quantitative economic tools such as cost-benefit analysis (CBA), net present value (NPV), and financial forecasting to optimize security investments within organizations, balancing protection effectiveness against operational costs. With economic security viewed as integral to organizational stability, these methodologies help justify and prioritize security expenditures, accounting for direct costs, externalities, and strategic business considerations.

Key finding: This article demonstrates how CBA can be embedded in organizational security risk management processes to evaluate preventive measures by quantifying costs and benefits systematically, thereby aiding in the selection of... Read more
Key finding: The study develops a financial analytics framework incorporating risk-based budgeting and cash flow analyses (including NPV and CAPM-derived interest rates) to optimize the economic efficiency of cybersecurity controls,... Read more
Key finding: By applying Holt-Winters forecasting methods to a company’s total cost time series, this research demonstrates how predictive analyses can inform economic security planning, enabling enterprises to manage expenditures... Read more
Key finding: This article provides an economic overview of aviation security, highlighting challenges in measuring output and costs, variations in national financing models, and discusses benefit-cost analysis as a tool for resource... Read more

All papers in Economics of Security

This study investigated the teaching of practical entrepreneurship in Business Education as a solution for new skill acquisition and business development in Anambra State. Two research questions guided the study. The population comprised... more
The article is devoted to the study of the dynamic of economic security indicators of Ukraine in terms of uts territorial components, as well as the search for ways and mechanisms capable of eliminating the main modern problems in the... more
Research focuses on European Economic Security and Sustainable Models in Knowledge Transfer. It explores Economic Security in Europe and Ukraine, focusing on how strategic autonomy can reduce risks from external dependencies. It analyzes... more
This study investigated the role of District Security Committees in the oversight of private security companies in Uganda to contribute to ways through which private public security provision can be enhanced for sustainable security and... more
Graduate unemployment is a serious problem facing the Nigerian society for several years. This became a topical issue in the national discourse on how to come out of the problem. The quest to proffer solution to the problem of graduate... more
The study examined the role of entrepreneurship education and the enhancement of entrepreneurial skills in solving graduate unemployment in the south east Nigeria. Questionnaire was used to collect data from students on entrepreneurship... more
Correlation in cyber risk represents an additional source of concern for utility and industrial infrastructures, where risks may be introduced by connected systems. A major means of reducing risk is to transfer it through insurance. In... more