{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T17:56:27Z","timestamp":1725558987001},"publisher-location":"Berlin, Heidelberg","reference-count":35,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540258629"},{"type":"electronic","value":"9783540320456"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2005]]},"DOI":"10.1007\/11424857_132","type":"book-chapter","created":{"date-parts":[[2010,7,13]],"date-time":"2010-07-13T19:49:45Z","timestamp":1279050585000},"page":"1239-1248","source":"Crossref","is-referenced-by-count":4,"title":["Cost-Benefit Analysis of Security Investments: Methodology and Case Study"],"prefix":"10.1007","author":[{"given":"Sangkyun","family":"Kim","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hong Joo","family":"Lee","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"132_CR1","doi-asserted-by":"crossref","unstructured":"Alpar, P., Kim, M.A.: A Microeconomic Approach to the Measurement of Information Technology Value. Journal of Management Information Systems\u00a07 (1990)","DOI":"10.1080\/07421222.1990.11517889"},{"key":"132_CR2","doi-asserted-by":"crossref","unstructured":"Barua, A., et al.: Information Technologies and Business Value: An Analytic and Empirical Investigation. Information Systems Research\u00a06 (1995)","DOI":"10.1287\/isre.6.1.3"},{"key":"132_CR3","doi-asserted-by":"crossref","unstructured":"Brynjolfsson, E., Hitt, L.: Paradox Lost? Firm-level Evidence on the Returns to Information Systems. Management Science\u00a042 (1996)","DOI":"10.1287\/mnsc.42.4.541"},{"key":"132_CR4","doi-asserted-by":"crossref","unstructured":"Mahmood, M.A., Mann, G.J.: Measuring the Organizational Impact of Information Technology Investment: An Exploratory Study. Journal of Management Information Systems\u00a010 (1993)","DOI":"10.1080\/07421222.1993.11517992"},{"key":"132_CR5","doi-asserted-by":"crossref","unstructured":"Mitra, S., Chaya, A.K.: Analyzing Cost-effectiveness of Organizations: the Impact of Information Technology Spending. Journal of Management Information Systems\u00a013 (1996)","DOI":"10.1080\/07421222.1996.11518122"},{"key":"132_CR6","doi-asserted-by":"crossref","unstructured":"Rai, A., et al.: Technology Investment and Business Performance. Communications of the ACM\u00a040 (1997)","DOI":"10.1145\/256175.256191"},{"key":"132_CR7","doi-asserted-by":"crossref","unstructured":"Eloff, J.H.P., et al.: A Comparative Framework for Risk Analysis Methods. Computers & Security\u00a012 (1993)","DOI":"10.1016\/0167-4048(93)90056-B"},{"key":"132_CR8","unstructured":"Geer, D.E.: Making Choices to Show ROI. Secure Business Quarterly\u00a01 (2001)"},{"key":"132_CR9","volume-title":"Systems Thinking, Systems Practice","author":"P. Checkland","year":"1981","unstructured":"Checkland, P.: Systems Thinking, Systems Practice. John Wiley & Sons, Chichester (1981)"},{"key":"132_CR10","doi-asserted-by":"crossref","unstructured":"Delone, W.H., McLean, E.R.: Information Systems Success: The Quest for the Dependent Variable. Information Systems Research (1992)","DOI":"10.1287\/isre.3.1.60"},{"key":"132_CR11","doi-asserted-by":"crossref","unstructured":"Mahmood, M.A.: A Comprehensive Model for Measuring the Potential Impact of Information Technology on Organizational Strategic Variables. Decision Sciences\u00a022 (1991)","DOI":"10.1111\/j.1540-5915.1991.tb00368.x"},{"key":"132_CR12","doi-asserted-by":"crossref","unstructured":"Palvia, P.C.: Developing a Model of the Global and Strategic Impact of Information Technology. Information & Management\u00a032 (1997)","DOI":"10.1016\/S0378-7206(97)00023-2"},{"key":"132_CR13","doi-asserted-by":"crossref","unstructured":"Grover, V., et al.: Information Systems Effectiveness: The Construct Space and Patterns of Application. Information & Management\u00a031 (1996)","DOI":"10.1016\/S0378-7206(96)01079-8"},{"key":"132_CR14","volume-title":"Business Process Engineering","author":"T. Saarinen","year":"1994","unstructured":"Saarinen, T., Scheer, A.W.: Business Process Engineering. Springer, Heidelberg (1994)"},{"key":"132_CR15","doi-asserted-by":"crossref","unstructured":"Torkzadeh, G., Doll, W.J.: The Development of a Tool for Measuring the Perceived Impact of Information Technology on Work, Omega (1999)","DOI":"10.1016\/S0305-0483(98)00049-8"},{"key":"132_CR16","doi-asserted-by":"crossref","unstructured":"Renkema, T.J.W., Berghout, E.W.: Methodologies for Information Systems Investment Evaluation at the Proposal Stage: A Comparative Review. Information and Software Technology\u00a039 (1997)","DOI":"10.1016\/0950-5849(96)85006-3"},{"key":"132_CR17","unstructured":"Remenyi, D., et al.: Effective Measurement and Management of IT Costs and Benefits. Butterworth-Heinemann (2000)"},{"key":"132_CR18","doi-asserted-by":"crossref","unstructured":"Jiang, J.J., Klein, G.: Information System Project-selection Criteria Variations within Strategic Classes. IEEE Transactions on Engineering Management\u00a046 (1999)","DOI":"10.1109\/17.759145"},{"key":"132_CR19","doi-asserted-by":"crossref","unstructured":"Bacon, C.J.: The Use of Decision Criteria in Selecting Information Systems \/ Technology Investments. MIS Quarterly (September 1992)","DOI":"10.2307\/249532"},{"key":"132_CR20","unstructured":"Scott, D.: Security Investment Justification and Success Factors. Gartner (1998)"},{"key":"132_CR21","volume-title":"Disaster Recovery Planning","author":"R.J. Bates","year":"1991","unstructured":"Bates, R.J.: Disaster Recovery Planning. McGraw-Hill, New York (1991)"},{"key":"132_CR22","doi-asserted-by":"crossref","unstructured":"Power, R.: CSI\/FBI Computer Crime and Security Survey. Computer Security Issues & Trends\u00a018 (2002)","DOI":"10.1016\/S1361-3723(02)00714-5"},{"key":"132_CR23","unstructured":"Blakley, B.: Returns on Security Investment: An Imprecise but Necessary Calculation. Secure Business Quarterly\u00a01 (2001)"},{"key":"132_CR24","unstructured":"Witty, R., et al.: The Price of Information Security, Strategic Analysis Report. Gartner (2001)"},{"key":"132_CR25","unstructured":"Malik, W.: A Security Funding Strategy. Gartner (2001)"},{"key":"132_CR26","unstructured":"Kim, S.: A Study on Enterprise Information System Investment Evaluation, Master thesis. Yonsei University (2000)"},{"key":"132_CR27","volume-title":"CISSP All-in-One Exam Guide","author":"S. Harris","year":"2001","unstructured":"Harris, S.: CISSP All-in-One Exam Guide. McGraw-Hill, New York (2001)"},{"key":"132_CR28","unstructured":"Roper, C.A.: Risk Management for Security Professionals. Butterworth Heinemann (1999)"},{"key":"132_CR29","volume-title":"Controls and Security of Computer Information Systems","author":"P.E. Fites","year":"1989","unstructured":"Fites, P.E., et al.: Controls and Security of Computer Information Systems. Computer Science Press, Rockville (1989)"},{"key":"132_CR30","volume-title":"Computer Security Handbook","author":"A.E. Hutt","year":"1988","unstructured":"Hutt, A.E.: Management\u2019s Roles in Computer Security. In: Computer Security Handbook. Macmillan Publishing Company, Basingstoke (1988)"},{"key":"132_CR31","unstructured":"Vallabhaneni, R.: CISSP Examination Textbooks. SRV Professional Publications (2000)"},{"key":"132_CR32","volume-title":"The CISSP Prep Guide: Mastering the Ten Domains of Computer Security","author":"R.L. Krutz","year":"2001","unstructured":"Krutz, R.L., Vines, R.D.: The CISSP Prep Guide: Mastering the Ten Domains of Computer Security. John Wiley & Sons, Chichester (2001)"},{"key":"132_CR33","unstructured":"Schweitzer, J.A.: Protecting Information in the Electronic Workplace: A Guide for Managers. Reston Publishing Company (1983)"},{"key":"132_CR34","unstructured":"Scott, D., Malik, W.: Best Practices in Business Continuity Planning. In: Symposium\/ITxpo 2001 (2001)"},{"key":"132_CR35","unstructured":"Porter, M.E.: How Competitive Forces Shape Strategy. Harvard Business Review\u00a057 (1979)"}],"container-title":["Lecture Notes in Computer Science","Computational Science and Its Applications \u2013 ICCSA 2005"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/11424857_132.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,17]],"date-time":"2020-11-17T14:54:54Z","timestamp":1605624894000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/11424857_132"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2005]]},"ISBN":["9783540258629","9783540320456"],"references-count":35,"URL":"https:\/\/doi.org\/10.1007\/11424857_132","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2005]]}}}