Security-related decisions, as many other policy decisions, are usually taken in complex socio-economic and political environments. In that environment the decision maker is typically confronted with numerous stakeholders with multiple needs, requirements and values. To make good and justifiable security decisions, the decision maker needs to assess alternatives available in order to find an option that delivers maximum benefits whilst satisfying the requirements and expectations of the stakeholders. VTT participated in a consortium developing a framework and tool for assessing the value of security decisions
With the increasing exposure and vulnerability to cyber attacks, it becomes necessary to develop met...
In this paper we present a Value Sensitive Approach (VSA) to information systems security (ISS) with...
The purpose of this paper is to investigate security decision-making during risk and uncertain condi...
Typical security related decision problems require decision-makers to select a subset of available o...
The paper proposes a preliminary framework for integrating economic evaluation and risk assessment. ...
A strategic question for any business is: What value do control frameworks give? The question concer...
Security decision-making is a critical task in tackling security threats affecting a system or proce...
Making well-founded security investment decisions is hard: several alternatives may need to be consi...
As the structure of modern organizations shifts, so correspondingly must the methodologies which und...
Software engineers, using decision theory to make design choices, can improve their selections if th...
In this paper we present and discuss a framework for security risk management, focusing on the selec...
As we have discussed in the problem analysis of this thesis, there are still many challenges regardi...
As the structure of modern organizations shifts, so correspondingly must the methodologies which und...
One of the most challenging tasks of homeland security policymakers is to allocate their limited res...
This research quantifies the maximum potential loss due to a breach of security to help decision mak...
With the increasing exposure and vulnerability to cyber attacks, it becomes necessary to develop met...
In this paper we present a Value Sensitive Approach (VSA) to information systems security (ISS) with...
The purpose of this paper is to investigate security decision-making during risk and uncertain condi...
Typical security related decision problems require decision-makers to select a subset of available o...
The paper proposes a preliminary framework for integrating economic evaluation and risk assessment. ...
A strategic question for any business is: What value do control frameworks give? The question concer...
Security decision-making is a critical task in tackling security threats affecting a system or proce...
Making well-founded security investment decisions is hard: several alternatives may need to be consi...
As the structure of modern organizations shifts, so correspondingly must the methodologies which und...
Software engineers, using decision theory to make design choices, can improve their selections if th...
In this paper we present and discuss a framework for security risk management, focusing on the selec...
As we have discussed in the problem analysis of this thesis, there are still many challenges regardi...
As the structure of modern organizations shifts, so correspondingly must the methodologies which und...
One of the most challenging tasks of homeland security policymakers is to allocate their limited res...
This research quantifies the maximum potential loss due to a breach of security to help decision mak...
With the increasing exposure and vulnerability to cyber attacks, it becomes necessary to develop met...
In this paper we present a Value Sensitive Approach (VSA) to information systems security (ISS) with...
The purpose of this paper is to investigate security decision-making during risk and uncertain condi...