The authors draw primarily on case-based information and focused survey data to describe and critique the economic strategies and broad technical approaches that private sector organizations adopt to secure their information technology infrastructure. Based on an analysis of these strategies, they propose several public policy responses that go beyond those that have come from recent policy reports. These responses include the construction of a national database of reliable and cost-effective information suitable for benchmarking, and public research and development support for innovations and infrastructures. The authors discuss the goal of such efforts: to shift private investments toward more socially-optimal proactive levels and to develop standards and protocols to ensure a more effective use of cyber security technologies.

The first systematic analysis of the economics of cyber security, this insightful book will be of great interest to private and public sector managers and strategists involved in cyber security, as well as academics and researchers in the fields of economics, management, information systems, systems engineering, political science, and public policy.