Understanding and Quantifying the Economic Impact of Security Failures and Defense Strategies

Project Summary

This I3P funded research program brings together a multi-institutional team to quantify the economic impact of security failures in information infrastructure at the national, the company and the technology levels. The research team, RAND Corporation, George Mason University, MIT Lincoln Laboratory, the University of Virginia and Dartmouth College’s Tuck School of Business, will work to understand how the information security marketplace functions and determine which market and policy mechanisms would be most effective in promoting security at all levels of the information infrastructure. The Dartmouth subproject will study how companies make cyber security decisions, how they invest in security, and how they perceive risk in the supply chain.

• Principal Investigator: M. Eric Johnson
• Project Researchers: Scott Dynes, Hans Brechbuhl
• Project Web Site