Research of Direct and Indirect Costs in Evaluation of Cyber Security

Abstract

The main problem is that the benefits of cybersecurity investments as well as the associated risks and the additional impact of unmanageable externalities are very difficult to quantify. Therefore, in order to explore the benefits of investing in cyber security, it is necessary to determine the relevant costs and how they should be measured. Thus, the object of the present research is the costs of cyber security. The aim of the research is to classify the costs of cybersecurity investments in order to be able to perform a proper and accurate evaluation of the benefit-cost ratio of these investments. Empirical research has shown that it is expedient to evaluate the benefits of cybersecurity investments based on the type of costs, since this enables to obtain more accurate benefit-cost ratio evaluation results, compared to the results obtained without considering their classification.