Framing Information Security Budget Requests to Maximize Investments

Nicole Beebe (), Diana Young and Frederick Chang
Additional contact information
Nicole Beebe: UTSA

Working Papers from College of Business, University of Texas at San Antonio

Abstract: Nearly one in three security practitioners believe that the organization they work for under-funds information security efforts. Rational choice and economic models have been developed to help decision makers determine the optimal amount they should spend to protect a set of information assets. These models presume investment decisions are rationally made, despite long-standing behavioral and decision making research to the contrary that shows decisions are not entirely rational when risk and uncertainty are involved. The purpose of this research was to empirically validate our hypothesis that information security investment decision makers exhibit irrational decision making behavior when faced with competing budget alternatives involving risk. Specifically, we test the Framing Effect under Prospect Theory, which suggests that individuals exhibit unique risk attitudes when evaluating gain related and loss related risk decisions. The results of an on-line survey empirically validates our hypothesis that information security investment decision makers in fact exhibit irrational decision making behavior when faced with competing budget alternatives involving risk. High-level decision makers exhibit irrational decision making behavior concerning information security when faced with competing budget alternatives involving risk. The findings suggest that justifying budget requests in terms of assets protected will often garner greater budgets than those framed in terms of the negative ramifications if security investments are not made. The findings also suggest that existing rational choice and economic models for information security investments should be augmented with measurement of risk perception and account for expected decision biases.

Keywords: Information Security; Prospect Theory; Framing Effect; Investment; Risk (search for similar items in EconPapers)
Pages: 10 pages
Date: 2013-07-05
References: Add references at CitEc
Citations:

Downloads: (external link)
http://interim.business.utsa.edu/wps/is/0041IS-329-2013.pdf Full text Classification- D81, M19 (application/pdf)
Our link check indicates that this URL is bad, the error code is: 404 Not Found

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:tsa:wpaper:0217is

Access Statistics for this paper

More papers in Working Papers from College of Business, University of Texas at San Antonio Contact information at EDIRC.
Bibliographic data for series maintained by Wendy Frost ().