Cybersecurity: Stakeholder incentives, externalities, and policy options

Johannes M. Bauer and Michel J.G. van Eeten

Telecommunications Policy, vol. 33, issue 10-11, 706-719

Abstract: Information security breaches are increasingly motivated by fraudulent and criminal motives. Reducing their considerable costs has become a pressing issue. Although cybersecurity has strong public good characteristics, most information security decisions are made by individual stakeholders. Due to the interconnectedness of cyberspace, these decentralized decisions are afflicted with externalities that can result in sub-optimal security levels. Devising effective solutions to this problem is complicated by the global nature of cyberspace, the interdependence of stakeholders, as well as the diversity and heterogeneity of players. The paper develops a framework for studying the co-evolution of the markets for cybercrime and cybersecurity. It examines the incentives of stakeholders to provide for security and their implications for the ICT ecosystem. The findings show that market and non-market relations in the information infrastructure generate many security-enhancing incentives. However, pervasive externalities remain that can only be corrected by voluntary or government-led collective measures.

Keywords: Cybersecurity; Cybercrime; Security; incentives; Externalities; Information; security; policy; Regulation. (search for similar items in EconPapers)
References: Add references at CitEc
Citations: View citations in EconPapers (10)

Downloads: (external link)
http://www.sciencedirect.com/science/article/pii/S0308596109000986
Full text for ScienceDirect subscribers only

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:eee:telpol:v:33:y::i:10-11:p:706-719

Ordering information: This journal article can be ordered from
http://www.elsevier.com/wps/find/journaldescription.cws_home/30471/bibliographic
http://www.elsevier. ... /30471/bibliographic

Access Statistics for this article

Telecommunications Policy is currently edited by Erik Bohlin

More articles in Telecommunications Policy from Elsevier
Bibliographic data for series maintained by Catherine Liu ().