{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T07:33:10Z","timestamp":1778398390886,"version":"3.51.4"},"reference-count":23,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2007,1,9]],"date-time":"2007-01-09T00:00:00Z","timestamp":1168300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2007,6,25]]},"DOI":"10.1007\/s10207-006-0010-x","type":"journal-article","created":{"date-parts":[[2007,1,8]],"date-time":"2007-01-08T13:52:07Z","timestamp":1168264327000},"page":"197-211","source":"Crossref","is-referenced-by-count":14,"title":["A probabilistic model for optimal insurance contracts against security risks and privacy violation in IT outsourcing environments"],"prefix":"10.1007","volume":"6","author":[{"given":"S.","family":"Gritzalis","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"A. N.","family":"Yannacopoulos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"C.","family":"Lambrinoudakis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"P.","family":"Hatzopoulos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"S. K.","family":"Katsikas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2007,1,9]]},"reference":[{"key":"10_CR1","volume-title":"Economics of Information Security","author":"A. Acquisti","year":"2004","unstructured":"Acquisti A. (2004). Privacy and security of personal information: economic incentives and technological solutions. In: Camp, L. and Lewis, S. (eds) Economics of Information Security, pp. Springer, Berlin Heidelberg New York"},{"key":"10_CR2","doi-asserted-by":"crossref","unstructured":"Anderson, R.: Why information security is hard\u2014an economic perspective. In: Proceedings of the 17th Annual Computer Security Applications Conference (2001)","DOI":"10.1109\/ACSAC.2001.991552"},{"key":"10_CR3","unstructured":"Aubert, B., Rivard, S., Patry, M.: Managing IT outsourcing risk: lessons learned. In: CIRANO Centre Interuniversitaire de Recherche en ANalyse des Organisations Scientific Series, 2001s-39 (2001)"},{"key":"10_CR4","unstructured":"Aubert, B. Patry, M., Rivard, S.: Assessing the Risk of IT Outsourcing. In: CIRANO Centre Interuniversitaire de Recherche en ANalyse des Organisations Scientific Series, 1998s-16 (1998)"},{"issue":"1","key":"10_CR5","doi-asserted-by":"crossref","first-page":"113","DOI":"10.1023\/A:1013168927238","volume":"3","author":"E. Barry","year":"2002","unstructured":"Barry E., Mukhopadhyay T. and Slaughter S. (2002). Software project duration and effort: an empirical study. Inform. Technol. Manage. 3(1): 113\u2013136","journal-title":"Inform. Technol. Manage."},{"issue":"3","key":"10_CR6","first-page":"60","volume":"42","author":"J. Barthelemy","year":"2001","unstructured":"Barthelemy J. (2001). The hidden costs of IT outsourcing. Sloan Manage. Rev. 42(3): 60\u201370","journal-title":"Sloan Manage. Rev."},{"key":"10_CR7","doi-asserted-by":"crossref","unstructured":"Basu, V., Lederer, A.: An agency theory model of ERP implementation. In: Proceedings of the ACM SIGMIS\u201904, Tucson, USA (2004)","DOI":"10.1145\/982372.982375"},{"issue":"2","key":"10_CR8","doi-asserted-by":"crossref","first-page":"78","DOI":"10.1145\/1042091.1042094","volume":"48","author":"L. Bodin","year":"2005","unstructured":"Bodin L., Gordon L.A. and Loeb M.P. (2005). Evaluating information security investments using the analytic hierarchy process. Commun. ACM 48(2): 78\u201383","journal-title":"Commun. ACM"},{"issue":"7","key":"10_CR9","doi-asserted-by":"crossref","first-page":"87","DOI":"10.1145\/1005817.1005828","volume":"47","author":"H. Cavusoglu","year":"2004","unstructured":"Cavusoglu H., Mishra B. and Raghunathan S. (2004). A model for evaluating IT security investments. Commun. ACM 47(7): 87\u201392","journal-title":"Commun. ACM"},{"issue":"4","key":"10_CR10","first-page":"67","volume":"39","author":"A.V. DiRomualdo","year":"1998","unstructured":"DiRomualdo A.V. and Gurbaani V. (1998). Strategic intent for IT outsourcing. Sloan Manage. Rev. 39(4): 67\u201380","journal-title":"Sloan Manage. Rev."},{"key":"10_CR11","volume-title":"Actuarial Models for Disability Insurance","author":"S. Haberman","year":"1999","unstructured":"Haberman S. and Pitacco S. (1999). Actuarial Models for Disability Insurance. Chapman and Hall, London"},{"issue":"4","key":"10_CR12","doi-asserted-by":"crossref","first-page":"438","DOI":"10.1145\/581271.581274","volume":"5","author":"L.A. Gordon","year":"2002","unstructured":"Gordon L.A. and Loeb M.P. (2002). The Economics of Information Security Investment. ACM Trans. Inform. Syst. Secur. 5(4): 438\u2013457","journal-title":"ACM Trans. Inform. Syst. Secur."},{"issue":"3","key":"10_CR13","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1145\/636772.636774","volume":"46","author":"L.A. Gordon","year":"2003","unstructured":"Gordon L.A., Loeb M.P. and Sohail T. (2003). A framework for using insurance for cyber risk management. Commun. ACM 46(3): 81\u201385","journal-title":"Commun. ACM"},{"key":"10_CR14","volume-title":"Managing Cyber-Security Resources: A Cost-Benefit Analysis","author":"L.A. Gordon","year":"2005","unstructured":"Gordon L.A. and Loeb M.P. (2005). Managing Cyber-Security Resources: A Cost-Benefit Analysis. Mc Graw Hill, New York"},{"key":"10_CR15","doi-asserted-by":"crossref","unstructured":"Keil, P.: Principal agent theory and its application to analyze outsourcing of software development. In: Proceedings of the ACM EDSER\u201905, St Louis, USA (2005)","DOI":"10.1145\/1083091.1083094"},{"issue":"3","key":"10_CR16","doi-asserted-by":"crossref","first-page":"363","DOI":"10.2307\/249670","volume":"22","author":"M. Lacity","year":"1998","unstructured":"Lacity M. and Willcocks L. (1998). Practices in information technology outsourcing: lessons from experience. MIS Q. 22(3): 363\u2013408","journal-title":"MIS Q."},{"key":"10_CR17","doi-asserted-by":"crossref","unstructured":"Laffont J.L., Martimort D. (2002) The Theory of Incentives: The Principa-Agent Model. Princeton","DOI":"10.1515\/9781400829453"},{"issue":"5","key":"10_CR18","doi-asserted-by":"crossref","first-page":"521","DOI":"10.1016\/j.csi.2005.01.010","volume":"27","author":"C. Lambrinoudakis","year":"2005","unstructured":"Lambrinoudakis C., Gritzalis S., Hatzopoulos P., Yannacopoulos A.N. and Katsikas S.K. (2005). A formal model for pricing information systems insurance contracts. Comput. Stand. Interf. 27(5): 521\u2013532","journal-title":"Comput. Stand. Interf."},{"key":"10_CR19","doi-asserted-by":"crossref","unstructured":"Odlyzko, A.: Privacy, economics, and price discrimination on the internet. In: Proceedings of the 5th ACM International Conference on Electronic Commerce (2003)","DOI":"10.1145\/948005.948051"},{"issue":"1","key":"10_CR20","doi-asserted-by":"crossref","first-page":"57","DOI":"10.1080\/07421222.1993.11517990","volume":"10","author":"W.B. Richmond","year":"1993","unstructured":"Richmond W.B. and Seidmann A. (1993). Software development outsourcing: contract structure and business value. J. Manage. Inform. Syst. 10(1): 57\u201372","journal-title":"J. Manage. Inform. Syst."},{"key":"10_CR21","doi-asserted-by":"crossref","unstructured":"Schechter, S., Smith, M.: How much security is enough to stop a thief: the economics of outsider theft via computer systems and networks. In: Proceedings of the Financial Cryptography Conference (2003)","DOI":"10.1007\/978-3-540-45126-6_9"},{"issue":"12","key":"10_CR22","doi-asserted-by":"crossref","first-page":"1726","DOI":"10.1287\/mnsc.43.12.1726","volume":"43","author":"E.T.G. Wang","year":"1997","unstructured":"Wang E.T.G., Barron T. and Seidmann A. (1997). Contracting structures for custom software development: the impact of informational rents and uncertainty on internal development and outsourcing. Manage. Sci. 43(12): 1726\u20131744","journal-title":"Manage. Sci."},{"key":"10_CR23","doi-asserted-by":"crossref","unstructured":"Wu D., Ding M., Hitt L.: Learning in ERP contracting: a principal-agent analysis. In: Sprague, R.H. Jr. (ed.) Proceedings of the Thirty-seventh Annual Hawaii International Conference on System Sciences, IEEE Computer Society Press, Los Alamitos, 2004 (2003)","DOI":"10.1109\/HICSS.2004.1265503"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-006-0010-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10207-006-0010-x\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-006-0010-x","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,4,19]],"date-time":"2020-04-19T17:08:04Z","timestamp":1587316084000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10207-006-0010-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,1,9]]},"references-count":23,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2007,6,25]]}},"alternative-id":["10"],"URL":"https:\/\/doi.org\/10.1007\/s10207-006-0010-x","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2007,1,9]]}}}