Several recent security incidents show that decision-making on cyber-security can have consequences reaching far into the future. In a world of further digitalization, interconnectedness, and increasing activities of cyber-criminals, the question is how the decision-making needs to adapt to ensure security.

More than 15 years of research has been conducted in the field of security economics on security investment decision-making. Although the field of security economics already recognizes sta...