{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T11:35:45Z","timestamp":1783424145044,"version":"3.54.6"},"reference-count":45,"publisher":"Informa UK Limited","issue":"1","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Journal of Management Information Systems"],"published-print":{"date-parts":[[2013,7]]},"DOI":"10.2753\/mis0742-1222300104","type":"journal-article","created":{"date-parts":[[2013,8,20]],"date-time":"2013-08-20T01:05:02Z","timestamp":1376960702000},"page":"123-152","source":"Crossref","is-referenced-by-count":108,"title":["Managing Interdependent Information Security Risks: Cyberinsurance, Managed Security Services, and Risk Pooling Arrangements"],"prefix":"10.1080","volume":"30","author":[{"given":"Xia","family":"Zhao","sequence":"first","affiliation":[{"name":"a Bryan School of Business and Economics, University of North Carolina at Greensboro"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ling","family":"Xue","sequence":"additional","affiliation":[{"name":"a Bryan School of Business and Economics, University of North Carolina at Greensboro"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrew B.","family":"Whinston","sequence":"additional","affiliation":[{"name":"b Center for Research in Electronic Commerce, University of Texas at Austin"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"301","published-online":{"date-parts":[[2014,12,8]]},"reference":[{"key":"1","doi-asserted-by":"crossref","unstructured":"Allen, J.; Gabbard, D.; and May, C. Outsourcing managed security services. Carnegie Mellon Software Engineering Institute, Pittsburgh, 2003 (available at <a target=\"_blank\" href='http:\/\/www.cert.org\/archive\/pdf\/omss.pdf'>www.cert.org\/archive\/pdf\/omss.pdf<\/a>","DOI":"10.21236\/ADA412014"},{"key":"2","doi-asserted-by":"crossref","first-page":"610","DOI":"10.1126\/science.1130992","article-title":"The economics of information security","volume":"314","author":"R. Anderson","year":"2006","journal-title":"Science"},{"key":"3","volume-title":"Outsourcing Information Security","author":"C. Axelrod","year":"2004"},{"issue":"2","key":"4","doi-asserted-by":"crossref","first-page":"281","DOI":"10.2753\/MIS0742-1222250211","article-title":"Decision-theoretic and game-theoretic approaches to IT security investment","volume":"25","author":"H. Cavusoglu","year":"2008","journal-title":"Journal of Management Information Systems"},{"issue":"3","key":"5","doi-asserted-by":"crossref","first-page":"241","DOI":"10.2753\/MIS0742-1222260308","article-title":"Risks and benefits of signaling information system characteristics to strategic attackers","volume":"26","author":"M. Cremonini","year":"2009-10","journal-title":"Journal of Management Information Systems"},{"key":"6","unstructured":"CSI computer crime and security survey 2010\/2011. Computer Security Institute, New York, 2011 (available at <a target=\"_blank\" href='http:\/\/gocsi.com\/survey\/'>http:\/\/gocsi.com\/survey\/<\/a>"},{"issue":"9","key":"7","doi-asserted-by":"crossref","first-page":"1254","DOI":"10.1287\/mnsc.45.9.1254","article-title":"Organizational form and efficiency: The coexistence of stock and mutual property-liability insurers","volume":"45","author":"J. Cummins","year":"1999","journal-title":"Management Science"},{"issue":"2","key":"8","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1007\/BF01065358","article-title":"Insurance with undiversifiable risk: Contract structure and organizational form of insurance firms","volume":"6","author":"N. Doherty","year":"1993","journal-title":"Journal of Risk and Uncertainty"},{"issue":"2","key":"9","doi-asserted-by":"crossref","first-page":"186","DOI":"10.1287\/isre.1050.0053","article-title":"The economic incentives for sharing security information","volume":"16","author":"E. Gal-Or","year":"2005","journal-title":"Information Systems Research"},{"issue":"4","key":"10","doi-asserted-by":"crossref","first-page":"428","DOI":"10.1145\/581271.581274","article-title":"The economics of information security investment","volume":"5","author":"L. Gordon","year":"2002","journal-title":"ACM Transactions on Information and Systems Security"},{"issue":"6","key":"11","doi-asserted-by":"crossref","first-page":"461","DOI":"10.1016\/j.jaccpubpol.2003.09.001","article-title":"Sharing information on computer systems security: An economic analysis","volume":"22","author":"L. Gordon","year":"2003","journal-title":"Journal of Accounting and Public Policy"},{"issue":"3","key":"12","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1145\/636772.636774","article-title":"A framework for using insurance for cyber-risk management","volume":"46","author":"L. Gordon","year":"2003","journal-title":"Communications of the ACM"},{"issue":"4","key":"13","doi-asserted-by":"crossref","first-page":"1109","DOI":"10.2307\/41703500","article-title":"Growth and sustainability of managed security services networks: An economic perspective","volume":"36","author":"A. Gupta","year":"2012","journal-title":"MIS Quarterly"},{"issue":"3","key":"14","doi-asserted-by":"crossref","first-page":"337","DOI":"10.2753\/MIS0742-1222250310","article-title":"Investments in information security: A real options perspective with Bayesian postaudit","volume":"25","author":"H. Herath","year":"2008-9","journal-title":"Journal of Management Information Systems"},{"issue":"2","key":"15","doi-asserted-by":"crossref","first-page":"324","DOI":"10.2307\/3003457","article-title":"Moral hazard in teams","volume":"13","author":"B. Holmstrom","year":"1982","journal-title":"Bell Journal of Economics"},{"issue":"3","key":"16","doi-asserted-by":"crossref","first-page":"117","DOI":"10.2753\/MIS0742-1222290304","article-title":"Information security outsourcing with system interdependency and mandatory security requirement","volume":"29","author":"K.-L. Hui","year":"2012-13","journal-title":"Journal of Management Information Systems"},{"issue":"3","key":"17","doi-asserted-by":"crossref","first-page":"245","DOI":"10.1016\/S0925-5273(00)00070-0","article-title":"An inter-organizational information system for supply chain management","volume":"70","author":"P. Humphreys","year":"2001","journal-title":"International Journal of Production Economics"},{"issue":"2","key":"18","doi-asserted-by":"crossref","first-page":"241","DOI":"10.2753\/MIS0742-1222250210","article-title":"Understanding the value of countermeasure portfolios in information systems security","volume":"25","author":"R. Kumar","year":"2008","journal-title":"Journal of Management Information Systems"},{"issue":"2-3","key":"19","doi-asserted-by":"crossref","first-page":"231","DOI":"10.1023\/A:1024119208153","article-title":"Interdependent security","volume":"26","author":"H. Kunreuther","year":"2003","journal-title":"Journal of Risk and Uncertainty"},{"issue":"2","key":"20","doi-asserted-by":"crossref","first-page":"295","DOI":"10.1287\/isre.1120.0447","article-title":"Contracting information security in the presence of double moral hazard","volume":"24","author":"C. Lee","year":"2013","journal-title":"Information Systems Research"},{"issue":"1","key":"21","doi-asserted-by":"crossref","first-page":"175","DOI":"10.2307\/2678136","article-title":"Moral hazard in risk pooling arrangements","volume":"68","author":"W. Lee","year":"2001","journal-title":"Journal of Risk and Insurance"},{"issue":"2","key":"22","doi-asserted-by":"crossref","first-page":"529","DOI":"10.1086\/427637","article-title":"The formation of mutual insurers in markets with adverse selection","volume":"78","author":"J. Ligon","year":"2005","journal-title":"Journal of Business"},{"key":"23","doi-asserted-by":"crossref","DOI":"10.2139\/ssrn.2002844","volume-title":"Optimal risk sharing with limited liability","author":"S. Malamud","year":"2012"},{"key":"24","unstructured":"Managed security services hot despite cool economy due to growing threats, mobile devices, move to cloud. Infonetics Research Report, Campbell, CA, September 27, 2011."},{"issue":"4","key":"25","doi-asserted-by":"crossref","first-page":"476","DOI":"10.1111\/j.1465-7295.1974.tb00417.x","article-title":"Insurance theory: Reserves versus mutuality","volume":"12","author":"J. Marshall","year":"1974","journal-title":"Economic Inquiry"},{"issue":"2","key":"26","doi-asserted-by":"crossref","first-page":"351","DOI":"10.1086\/467160","article-title":"Ownership structure across lines of property-casualty insurance","volume":"31","author":"D. Mayers","year":"1988","journal-title":"Journal of Law and Economics"},{"issue":"3","key":"27","doi-asserted-by":"crossref","first-page":"407","DOI":"10.1086\/296138","article-title":"Contractual provisions, organizational structure and conflict in insurance markets","volume":"54","author":"D. Mayers","year":"1981","journal-title":"Journal of Business"},{"key":"28","first-page":"631","volume-title":"Information Security Management Handbook","author":"L. McQuillan","year":"2007"},{"key":"29","unstructured":"Mohan, R. 2010. How to defend against DDoS attacks? <i>Security Week<\/i>, April 27, 2010 (available at <a target=\"_blank\" href='http:\/\/www.securityweek.com\/content\/how-defend-against-ddos-attacks\/'>www.securityweek.com\/content\/how-defend-against-ddos-attacks\/<\/a>"},{"key":"30","unstructured":"Moitra, S. D., and Konda, S. L. The survivability of network systems: An empirical analysis. Software Engineering Institute\/Computer Emergency Response Team (SEI\/CERT) Report no. CMU\/SEI-2000-TR-021, Carnegie Mellon University, Pittsburgh, PA, December 2000."},{"key":"31","unstructured":"Ogut, H.; Menon, N.; and Raghunathan, S. Cyber insurance and IT security investment: Impact of interdependent risk. Working Paper, University of Texas at Dallas, 2005 (available at <a target=\"_blank\" href='http:\/\/infosecon.net\/workshop\/pdf\/56.pdf'>http:\/\/infosecon.net\/workshop\/pdf\/56.pdf<\/a>"},{"key":"32","unstructured":"The picture of ART. Swiss Re study, Zurich, February 5, 2003 (available at <a target=\"_blank\" href='http:\/\/www.swissre.com\/media\/news_releases\/new_swiss_re_sigma_study__the_picture_of_art.html'>www.swissre.com\/media\/news_releases\/new_swiss_re_sigma_study__the_picture_of_art.html<\/a>"},{"key":"33","unstructured":"Pitsillidis, A.; Levchenko, K.; Kreibich, C.; Kanich, C.; Voelker, G. M.; Paxson, V.; Weaver, N.; and Savage, S. Botnet judo: Fighting spam with itself. Paper presented at the Network and Distributed System Security Symposium (NDSS), San Diego, CA, February 28-March 3, 2010 (available at <a target=\"_blank\" href='http:\/\/www.isoc.org\/isoc\/conferences\/ndss\/10\/pdf\/12.pdf'>www.isoc.org\/isoc\/conferences\/ndss\/10\/pdf\/12.pdf<\/a>"},{"issue":"5","key":"34","doi-asserted-by":"crossref","first-page":"459","DOI":"10.1016\/0167-9236(92)90029-O","article-title":"Incomplete contracting issues in information systems development outsourcing","volume":"8","author":"W. Richmond","year":"1992","journal-title":"Decision Support Systems"},{"key":"35","unstructured":"Rippon, A. Cyber hackers can mess with Google\u2014Are you afraid for your business? EzineArticles.com, 2010 (available at <a target=\"_blank\" href='http:\/\/ezinearticles.com\/?Cyber-Hackers-Can-Mess-With-Google-Are-You-Afraid-For-Your-Business?&id=3882184\/'>http:\/\/ezinearticles.com\/?Cyber-Hackers-Can-Mess-With-Google-Are-You-Afraid-For-Your-Business?&id=3882184\/<\/a>"},{"issue":"4","key":"36","doi-asserted-by":"crossref","first-page":"629","DOI":"10.2307\/1885326","article-title":"Equilibrium in competitive insurance markets: An essay on the economics of imperfect information","volume":"90","author":"M. Rothschild","year":"1976","journal-title":"Quarterly Journal of Economics"},{"key":"37","unstructured":"Scott, C. Nearly a fifth of U. S. PCs have no antivirus protection. IDG News Service, May 29, 2012 (available at <a target=\"_blank\" href='http:\/\/www.pcworld.com\/article\/256493\/nearly_a_fifth_of_us_pcs_have_no_virus_protection_mcafee_finds.html'>www.pcworld.com\/article\/256493\/nearly_a_fifth_of_us_pcs_have_no_virus_protection_mcafee_finds.html<\/a>"},{"issue":"2","key":"38","doi-asserted-by":"crossref","first-page":"258","DOI":"10.1287\/isre.1080.0196","article-title":"Demand heterogeneity in IT infrastructure services: Modeling and evaluation of a dynamic approach to defining service levels","volume":"20","author":"S. Sen","year":"2009","journal-title":"Information Systems Research"},{"issue":"4","key":"39","doi-asserted-by":"crossref","first-page":"541","DOI":"10.2307\/1884469","article-title":"On moral hazard and insurance","volume":"93","author":"S. Shavell","year":"1979","journal-title":"Quarterly Journal of Economics"},{"issue":"4","key":"40","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1080\/10864415.2002.11044245","article-title":"A study of the value and impact of B2B e-commerce: The case of Web-based procurement","volume":"6","author":"C. Subramaniam","year":"2002","journal-title":"International Journal of Electronic Commerce"},{"key":"41","unstructured":"Tung, L. Five ways to defend against a DDos attack. IT News for Australian Business, October 12, 2010 (available at <a target=\"_blank\" href='http:\/\/www.itnews.com.au\/News\/234834,five-ways-to-defend-against-a-ddos-attack.aspx'>www.itnews.com.au\/News\/234834,five-ways-to-defend-against-a-ddos-attack.aspx<\/a>"},{"key":"42","unstructured":"Varian, H. R. Managing online security risks. <i>New York Times<\/i>, June 1 (2000) (available at <a target=\"_blank\" href='http:\/\/people.ischool.berkeley.edu\/~hal\/people\/hal\/NYTimes\/2000-06-01.html'>http:\/\/people.ischool.berkeley.edu\/~hal\/people\/hal\/NYTimes\/2000-06-01.html<\/a>"},{"key":"43","volume-title":"Fundamentals of Risk and Insurance","author":"E. Vaughan","year":"2008"},{"issue":"12","key":"44","doi-asserted-by":"crossref","first-page":"1726","DOI":"10.1287\/mnsc.43.12.1726","article-title":"Contracting structures for custom software development: The impacts of informational rents and uncertainty on internal development and outsourcing","volume":"43","author":"E. Wang","year":"1997","journal-title":"Management Science"},{"issue":"3","key":"45","doi-asserted-by":"crossref","first-page":"307","DOI":"10.1287\/mnsc.38.3.307","article-title":"Contracting for software development","volume":"38","author":"S. Whang","year":"1992","journal-title":"Management Science"}],"container-title":["Journal of Management Information Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.tandfonline.com\/doi\/pdf\/10.2753\/MIS0742-1222300104","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,21]],"date-time":"2019-07-21T11:26:44Z","timestamp":1563708404000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.tandfonline.com\/doi\/full\/10.2753\/MIS0742-1222300104"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,7]]},"references-count":45,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2014,12,8]]},"published-print":{"date-parts":[[2013,7]]}},"alternative-id":["10.2753\/MIS0742-1222300104"],"URL":"https:\/\/doi.org\/10.2753\/mis0742-1222300104","relation":{},"ISSN":["0742-1222","1557-928X"],"issn-type":[{"value":"0742-1222","type":"print"},{"value":"1557-928X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2013,7]]}}}