Standard Approach for Quantification of the ICT Security Investment for Cybercrime Prevention

With the rise of the potential risks from different cyber attacks on the ICT systems the investment in security technology is growing and is becoming a serious economoc issue to many organizations. The assessment of the appropriate investment that is economically affordable and provides enough protection of the enterprise information system is an issue that is analysed in the paper. Identification of the assets, the threats, the vulnerabilitise of the ICT systems are presented and the methods for quantification of the necessary investment. The paper concludes with a recommendation for a standard approach for optimal selection of security technology investment.