Quantifying the Return of Security Investments for Technology Startups

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F62690094%3A18450%2F24%3A50021612" target="_blank" >RIV/62690094:18450/24:50021612 - isvavai.cz</a>

Result on the web

<a href="https://bsj.uobaghdad.edu.iq/index.php/BSJ/article/view/9077" target="_blank" >https://bsj.uobaghdad.edu.iq/index.php/BSJ/article/view/9077</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.21123/bsj.2023.9077" target="_blank" >10.21123/bsj.2023.9077</a>

Result language

angličtina

Original language name

Quantifying the Return of Security Investments for Technology Startups

Original language description

Technology startups are critical to the advancement of digital initiatives in many countries undergoing smart nation agenda. Technology startups are thus vendors and suppliers of services to large organizations such as the government sector, multi-national corporations and financial institutions. As such, startups are fast becoming attack vectors for malicious perpetrators to gain entry via backdoors to large organizations. However, startups remain prudent in their cyber security spending as their north star is revenue generation by delivering their services and minimum viable product (MVP) to their customers. This study proposes an enhanced Return on Security Investment (ROSI) which helps technology startups calculate the return on security investment and justify their budget of cyber security spending. Though there are existing models to calculate the return of investments allocated to cyber security expenditure, they are rather complex and do not give management clarity in terms of the monetary value for cyber security spending. Furthermore, the existing models do not cater to the dynamics and nuances of technology startups. The enhanced model also provides technology startups the ability to appropriately adjust their cyber security investments based on the calculations of the Minimum (Min) and Maximum (Max) ROSI values. The proposed and enhanced ROSI model has been validated by 5 cyber security experts who agreed on the importance and necessity of the model to be applied to technology startups. The results of the case study on a FinTech startup enable the calculation of the Min and Max ROSI to justify the return on security investments and provide the startup with the ability to adjust the cyber security spending accordingly. © 2022 The Author(s). Published by College of Science for Women, University of Baghdad.

Czech name

—

Czech description

—

Type

J_imp - Article in a specialist periodical, which is included in the Web of Science database

CEP classification

—

OECD FORD branch

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Project

—

Continuities

I - Institucionalni podpora na dlouhodoby koncepcni rozvoj vyzkumne organizace

Publication year

2024

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Name of the periodical

Baghdad Science Journal

ISSN

2078-8665

e-ISSN

2411-7986

Volume of the periodical

21

Issue of the periodical within the volume

7

Country of publishing house

IQ - IRAQ

Number of pages

13

Pages from-to

2449-2461

UT code for WoS article

001278116000023

EID of the result in the Scopus database

2-s2.0-85199895859