The main purpose of this paper is to explore how Identity and Access Management is an
important asset in economics especially in decision making to support investments. Identity …

Abstract Systems security is essential for the efficient operation of all organizations. Indeed,
most large firms employ a designated 'Chief Information Security Officer'to coordinate the …

We develop and simulate a basic mathematical model of the costly deployment of software
patches in the presence of trade-offs between confidentiality and availability. The model …

Organizations that rely on cyberspace as a mission-critical asset require advanced
situational awareness to maintain a tactical advantage over emerging threats. A new cyber …

Information security managers with fixed budgets must invest in security measures to
mitigate increasingly severe threats whilst maintaining the alignment of their systems with …

This paper addresses the question of determining the optimal timing of interventions in
information security management. Using utility theory, we derive the limiting condition under …

This paper provides an overview of the field of security metrics and discusses results of a
survey of security experts on the topic. It describes a new framework for develo** security …

Increasing reliance on IT and the worsening threat environment mean that organisations are
under pressure to invest more in information security. A challenge is that the choices are …

If cloud is so good then why aren't companies using it more? In this paper we look at how
companies should make a decision to move some IT services or their IT infrastructure into …

Increasing concern about insider threats, cyber-espionage, and other types of attacks which
involve a high degree of stealthiness has renewed the desire to better understand the timing …