TY - GEN TI - Modelling the Human and Technological Costs and Benefits of USB Memory Stick Security Y1 - 2008/06/28/ AV - public N2 - Organizations deploy systems technologies in order to support their operations and achieve their business objectives. In so doing, they encounter tensions between the confidentiality, integrity, and availability of information, and must make investments in information security measures to address these concerns. We discuss how a macroeconomics-inspired model, analogous to models of interest rate policy used by central banks, can be used to understand trade-offs between investments against threats to confidentiality and availability. We investigate how such a model might be formulated by constructing a process model, based on empirically obtained data, of the use of USB memory sticks by employees of a financial services company. ID - discovery20102 PB - Workshop on the Economics of Information Security (WEIS) UR - http://www.informatik.uni-trier.de/~ley/db/conf/weis/weis2008.html CY - Hanover, NH, USA A1 - Beautement, A A1 - Coles, R A1 - Griffin, J A1 - Ioannidis, C A1 - Monahan, B A1 - Pym, DJ A1 - Sasse, MA A1 - Wonham, M T3 - Annual Workshop on the Economics of Information Security ER -