Information security

Are you over-spending or under-spending when it comes to your information security expenditure? InfoSec writers have published blogger Adrian Mizzi's Return on Information Security Investment paper on their website:

Much is said on the importance of investing in information security (Potter 2004; Ernst & Young 2003), but little is known on the extent and effectiveness of such sucurity programmes. A model that analyses the mechanics of an information security programme is presented and will serve as the founding work of future research in this area. The model attempts to put an upper-bound on the amount that should be sprent on an information security programme and estimates the amount an attacker is likely to spend to break into a system depending on the information assets at stake of the organisation in question. To view paper click here (pdf)

Noticebored.com for people interested in information security.