Economic Analysis on Information Security Incidents and Suggestion on Effective Information Security Policies

点击翻译按钮获取中文摘要

The purpose of this research is to clarify the effective information security countermeasures and policies by quantitatively analyzing impact of information security incidents toward economy and business. For the purpose, from the viewpoints of behavioral economics and microeconomics, I carry out some empirical analyses using micro data collected from the Web-based survey. As a result, it is found that there is an information security gap between workers and managers and there is also a difference in information security awareness and behavior between workers by some attributes such as working pattern and the organization attributes. Then, it is insisted that information security education is effective and that the government should support the education.