An economic analysis of information security decisions with mandatory security standards in resource sharing environments

作者:

Highlights:

• This paper examines strategic interaction in a resource sharing environment with mandatory security standard.

• It shows the strict mandatory standard doesn’t always benefit each firm.

• As firms share more resource, stricter security standard should be formulated.

• Compensation mechanism may harm each firm.

摘要

•This paper examines strategic interaction in a resource sharing environment with mandatory security standard.•It shows the strict mandatory standard doesn’t always benefit each firm.•As firms share more resource, stricter security standard should be formulated.•Compensation mechanism may harm each firm.

论文关键词:Information security investment,Information security standards,Resource sharing,Cyber-attacks,Compensation mechanism

论文评审过程:Received 19 February 2022, Revised 12 June 2022, Accepted 15 June 2022, Available online 18 June 2022, Version of Record 24 June 2022.

论文官网地址:https://doi.org/10.1016/j.eswa.2022.117894