The security of information is a fundamental concern to organizations operating in the modern digital economy. There are technical, behavioral, and organizational aspects related to this concern. There are also economic aspects of information security. One important economic aspect of information security (including cybersecurity) revolves around deriving the right amount an organization should invest in protecting information. Organizations also need to determine the most appropriate way to allocate such an investment.

The security of information is a fundamental concern to organizations operating in the modern digital economy. There are technical, behavioral, and organizational aspects related to this concern. There are also economic aspects of information security. One important economic aspect of information security (including cybersecurity) revolves around deriving the right amount an organization should invest in protecting information. Organizations also need to determine the most appropriate way to allocate such an investment.

The Fourth Annual Forum on Financial Information Systems & Cybersecurity: A Public Policy Perspective, held on May 23, 2007 at the Robert H. Smith School of Business, brought together experts and industry professionals from around the globe to discuss risk management issues related to information security. The day included expert presentations followed by discussions that ranged from the extremely theoretical to the practical to the purely political, and the issues ranged from personal security risks to corporate and national security risks.

In the past few years, Americans have come to learn that security initiatives are expensive and, many times, unsuccessful. However, high cost security is more than a government issue, it is also an important business issue. In a digital economy, businesses must work hard to keep client and employee information safe and private. Unfortunately many businesses spend millions of dollars on security initiatives that never deliver the promised results.

Stories concerning cybersecurity issues are now common in the news media. Articles addressing the theft of laptop computers with entire confidential databases have topped the list in recent months. The need to protect the nations infrastructure, a large part of which is controlled by computer networks, has also been the subject of many recent news stories and government reports. In response to the stories and reports, computer security experts have been working hard to develop all sorts of technical solutions to prevent, or at least quickly detect and correct, cybersecurity breaches.

Drs. Lawrence A. Gordon and Martin P. Loeb are part of the academic team from the University of Maryland's Robert H. Smith School of Business who assist the Computer Security Institute (CSI) and Federal Bureau of Investigation (FBI) with their Annual Computer Crime and Security Survey.

For several years an international group of researchers interested in the intersection of economics and information security have been holding a Workshop on Economics and Information Security (WEIS). The Fifth Workshop (June 26-28, 2006) was held at the University of Cambridge, UK, and close to 100 people (a combination of academician and practitioners) attended. The previous four workshops were held at the following universities: Harvard (2005), Minnesota (2004), Maryland (2003), and UC-Berkeley (2002).

The Smith School has been awarded a four-year, $1.4 million grant by the U.S. Department of Education to fund a Center for International Business Education and Research (CIBER). This high honor designates the Smith School as a national resource center in international business education and research. There are only 31 CIBERs in the nation.

The Computer Security Institute (CSI) has established the Gordon, Loeb and Lucyshyn Cybersecurity Economics Luncheon Series in recognition of the important research being conducted by Lawrence A. Gordon, Martin P. Loeb and William Lucyshyn related to the "economic aspects of cyber and computer security." Gordon and Loeb are professors in the Smith School of Business' accounting and information assurance department, and the authors of the highly acclaimed new book from McGraw-Hill entitledManaging Cybersecurity Resources: A Cost-Benefit Analysis.

Larry Gordon, Ernst & Young Alumni Professor of Managerial Accounting and Information Assurance and director of the Ph.D. Program, will be the plenary speaker at the London School of Economics' Management Accounting Research Group (MARG) Conference on April 6, 2006. The conference is sponsored by the Department of Accounting and Finance at LSE, the Chartered Institute of Management Accountants (CIMA) and the Institute of Chartered Accountants in England and Wales (ICAEW), with a theme of Risk Management & Financial Control."