Information Security Outsourcing with System Interdependency and Mandatory Security Requirement
MetadataShow full item record
The rapid growth of computer networks has led to proliferation of information security standards. To meet these security standards, some organizations outsource security protection to a managed security service provider (MSSP). However, this may give rise to system interdependency risks. This paper analyzes how such system interdependency risks interact with a mandatory security requirement to affect the equilibrium behaviors of an MSSP and its clients. We show that a mandatory security requirement will increase the MSSP’s effort and motivate it to serve more clients. Although more clients can benefit from the MSSP’s protection, they are also subjected to greater system interdependency risks. Social welfare will decrease if the mandatory security requirement is high and imposing verifiability may exacerbate social welfare losses. Our results imply that recent initiatives such as issuing certification to enforce computer security protection, or encouraging auditing of managed security services, may not be advisable.
Showing items related by title, author, creator and subject.
Barrie, Glenn; Whyte, Andrew; Bell, Janice (2017)© 2017 ACM. The Internet of Things (IoT) paradigm with its vast range of heterogeneous connecting technologies heralds a new era for internet research, especially given that this explosion in connectivity for devices or ...
Entries and exits from homelessness: A dynamic analysis of the relationship between structural conditions and individual characteristicsJohnson, G.; Scutella, R.; Tseng, Y.; Wood, Gavin; Guy, J.; Rosanna, S.; Yi-Ping, T.; Gavin, W. (2015)This report examines the relationship between structural factors, individual characteristics and homelessness. Our interest in the interaction of structural conditions and individual characteristics gives rise to two ...
Trust and reputation for service-oriented environments: Technologies for building business intelligence and consumer confidenceChang, Elizabeth; Dillon, Tharam S.; Hussain, Farookh (2006)Trust has played a central role in human relationships and hence has been the subject of study in many fields including business, law, social science, philosophy and psychology. It has played a pivotal role in forming ...