IT Security Investment and Costing Emphasizing Benefits in Times of Limited Budgets

Abstract

This article addresses different approaches for IT security investment cost-benefit analyses and argues calculation approaches that focus on the contribution of IT security procedures to support business process productivity. Several examples show opportunities how to generate economic revenues through appropriate security investments. These examples may serve as blueprints helping IT security mangers to claim appropriate budgets. Open issues are identified for developing more reliable and convincing cost-benefit analysis methods for security investments.