While mandatory security standards are salient in the management of information security,
the related theoretic studies are scarce, especially when strategic hackers are considered …

While technology similarity in network security aggravates breach interdependence, it can
improve the efficiency of security information sharing. This paper examines the effect of …

There are several types of relations between information assets of two firms, among which
substitutable relation is such that even when one of the firms is successfully breached by …

Nowadays, business connection between firms becomes rather common so that one firm
stores not only its information asset but also some of other firms' information asset. The …

Abstract Information security outsourcing has become an emerging trend in the operations of
information security, but the relation between information assets of firms and attack modes of …

To efficiently manage information security, firms typically outsource the security of partial
business (core and non-core) to a managed security service provider (MSSP). Four options …

With the start of 2024, Decision Analysis has now completed 20 full years of publication. As
the current editor-in-chief, I wanted to take this opportunity to reflect on the themes that have …

信息技术的快速发展不仅方便了人们的生活, 同时也给企业和个人带来了更大的安全隐患.
为了应对安全风险的挑战, 企业倾向于将部分信息安全外包给专业的管理安全服务提供商(MSSP …

In an increasingly interconnected digital landscape, cybersecurity has emerged as a
paramount concern for South African tourism and hospitality businesses, especially those …

The role of hacker attacks on information security investment and firm profits is fundamental
in information security economics, which, however, has not been fully examined yet. This …