The Economics of Cybersecurity Allan Friedman

Research Director, Center for Technology Innovation

Fellow, Governance Studies

Brookings Institution

http://www.brookings.edu/techinnovation.aspx

1

http://www.brookings.edu/techinnovation.aspx

Uh oh…

2

http://www.brookings.edu/techinnovation.aspx

Topics discussed in Economist cover article

Critical Infrastructure

Economic Espionage

Intelligence Community

Cyber Terrorism

Cyber Crime

Military Strategy

US Law & Policy

International Law & Policy

Technology Issues

Distribution of paragraph by topic

Economist, July 1 2010

3

http://www.brookings.edu/techinnovation.aspx

“cybersecurity”

4

http://www.brookings.edu/techinnovation.aspx

“cybersecurity”

5

http://www.brookings.edu/techinnovation.aspx

“cybersecurity”

6

http://www.brookings.edu/techinnovation.aspx

“cybersecurity”

7

http://www.brookings.edu/techinnovation.aspx

Need to disambiguate

8

http://www.brookings.edu/techinnovation.aspx

Scale

9

http://www.brookings.edu/techinnovation.aspx

Urgency

10

http://www.brookings.edu/techinnovation.aspx

Risk Evaluation

11

http://www.brookings.edu/techinnovation.aspx

Framing Matters

12

http://www.brookings.edu/techinnovation.aspx

13

http://www.brookings.edu/techinnovation.aspx

14

http://www.brookings.edu/techinnovation.aspx

Who pays?

15

http://www.brookings.edu/techinnovation.aspx

Asymmetric Information

16

http://www.brookings.edu/techinnovation.aspx

Externalities

17

http://www.brookings.edu/techinnovation.aspx

Insurance

18

http://www.brookings.edu/techinnovation.aspx

Market demand for transparency

“…not aware that investors

have asked for more

disclosure in this area”

19

http://www.brookings.edu/techinnovation.aspx

Transparency vs.

Accountability

20

http://www.brookings.edu/techinnovation.aspx

Data Breaches

21

http://www.brookings.edu/techinnovation.aspx

Network Effects

22

http://www.brookings.edu/techinnovation.aspx

“Cloud computing”

23

http://www.brookings.edu/techinnovation.aspx

The weakest link

24

http://www.brookings.edu/techinnovation.aspx

Risk

Questions? Comments?

Allan Friedman

afriedman@brookings.edu

http://www.brookings.edu/techinnovation.aspx

26

http://www.brookings.edu/techinnovation.aspx

Regulatio

n

Regulatory Spectrum

Laissez

Faire

Mandated

Standards Liability

Standards

&

Practices

Purchasin

g

Power