Search

Technologies and procedures for effectively securing the enterprise in cyberspace exist, but are largely underdeployed. Reasons for this shortcoming include the neglect of the role of stakeholder perceptions in organizational reward systems, and misaligned incentives for effective allocation of resources. We present a methodology for practitioners to employ, with examples for identification of perverse incentives—situations where the interests of a manager or employee are not aligned with those of the organization—and for estimation of the damage caused by incentive misalignment. We present our revision to the risk perception model developed by Fischhoff and Slovic. We also present the results of our findings from our interviews of 42 information security executives across the U.S. about the role of risk perception and incentives in information security decisions. We discuss how to identify and to correct misalignments, to develop efficient incentive structures, and to include perceptual principles and security governance in making information security a property of the organizational environment. This research contributes to the practice and theory of information security, and has several implications for practitioners and researchers in the alignment of incentives and symmetrization of information across organizations. [ABSTRACT FROM PUBLISHER]

The article discusses the role of cyberspace in the realization of U.S.'s mission. It emphasizes the importance of cyber education since it is believed that everyone has a particular role in the digital environment. It notes that the country's creation of the Chief Information Officer and the Chief Information Security Officer reflects the success of the concept, but they ought to be aligned. In addition, it invokes the proper management of the polarity of security and information access.

IT has a key role to play in government functions, especially given the Open Government Initiative in the US and its focus on transparency. What role can education play in helping the federal government better leverage IT? [ABSTRACT FROM PUBLISHER]