Analyzing Risks to Determine a New Return on Security Investment: Optimizing Security in an Escalating Threat Environment

View Sample PDF

Author(s): Warren Axelrod (United States Trust Company, USA)
Copyright: 2007
Pages: 25
Source title: Managing Information Assurance in Financial Services
Source Author(s)/Editor(s): H.R. Rao (University at Buffalo, State University of New York, USA), Manish Gupta (State University of New York, USA)and Shambhu J. Upadhyaya (University at Buffalo, State University of New York, USA)
DOI: 10.4018/978-1-59904-171-1.ch001

Keywords: Accounting & Finance / Accounting and Finance / Business & Management / Business Science Reference

Purchase

View Analyzing Risks to Determine a New Return on Security Investment: Optimizing Security in an Escalating Threat Environment on the publisher's website for pricing and purchasing information.

Abstract

This chapter expands upon standard methods of calculating the return on security investment (ROSI) in several ways. First, it accounts for the dynamic nature of threats, vulnerabilities, and defenses as they apply to the finance sector. Second, it takes a more holistic view of security investments using a portfolio method. The protection of information assets can be viewed in two ways. One is the hierarchical view of security measures, such as avoidance, deterrence, and prevention. The other is defense in depth, wherein various security tools and processes, such as firewalls, identity and access management, and intrusion detection and prevention products, are combined for greater overall protection. The reader will gain a deeper understanding of the factors that affect the risks and returns of investments in security measures, tools, and processes and will find that using the portfolio approach leads to more cost-effective security.

The IRMA Community

Research IRM

Analyzing Risks to Determine a New Return on Security Investment: Optimizing Security in an Escalating Threat Environment

Purchase

Abstract

Related Content

IRMA Sponsors