Cyber insurance is a rapidly developing area which draws more and more attention of
practitioners and researchers. Insurance, an alternative way to deal with residual risks, was …

We propose a comprehensive formal framework to classify all market models of cyber-
insurance we are aware of. The framework features a common terminology and deals with …

Purpose The purpose of this paper is to survey existing inter-organisational information
security research to scrutinise the kind of knowledge that is currently available and the way …

Despite the benefits of cyber-insurance, organizations are reluctant to enroll in such policies
mainly because of their limitation and high price. On the other hand, insurers are confronting …

Today, companies are required to be in control of their IT assets, and to provide proof of this
in the form of independent IT audit reports. However, many companies have outsourced …

Purpose: The study sought to look at Information Technology Outsourcing (ITO) practices in
the Kenyan banking sector and the effect it had on performance. Balance Scorecard was …

The rapid expansion of Internet based services has created opportunities for ICT firms to
collect and use, in an unauthorized way, information about individuals (eg customers …

This paper proposes a roadmap for how privacy leakages from outsourced managed
security services using intrusion detection systems can be controlled. The paper first …

What should be the minimum value of data security or privacy to a customer? We reason that
at a minimum this value should be equal to the premium charged by an insurer for cyber …

This paper proposes a measurement approach for estimating the privacy leakage from
Intrusion Detection System (IDS) alarms. Quantitative information flow analysis is used to …