IT Security Investments Through the Lens of the Resource-Based View: A new Theoretical Model and Literature Review

2015 | European Conference On Information Systems | Citations: 0

Authors: Weishäupl, Eva; Yasasin, Emrah; Schryen, Guido

Abstract: IT security has become a major issue for organizations as they need to protect t ... Expand

Abstract: IT security has become a major issue for organizations as they need to protect their assets, including IT resources, intellectual property and business processes, against security attacks. Disruptions of ITbased business activities can easily lead to economic damage, such as loss of productivity, revenue and reputation. Organizations need to decide (1) which assets need which level of protection, (2) which technical, managerial and organizational security countermeasures lead to this protection and (3) how much should be spent on which countermeasure in the presence of budget constraints. Answering these questions requires both making IT security investment decisions and evaluating the effectiveness and efficiency of these decisions. Collapse

Topics: IT security business process management organizational productivity IT security threat competitive advantage

Methods: literature study synthesis structured literature research

Theories: resource based view of the firm