IT-security in electronic commerce: from cost to value driver

Abstract

We systematically discuss the role of IT security regarding electronic commerce (EC) and show that business success in EC heavily depends on IT security and moreover, it even emerges to a business enabler for professional EC. For that reason, we call IT security a value driver and introduce a first proposal for quantification of benefits that will allow to improve economic calculations in security management. In order to appropriately address the role of IT security, this must be done in a highly professional way. Therefore, we introduce a management approach that has been designed for enterprise-wide as well as daily business handling of IT security within EC environments. As part of this approach, we aim to support decisions on the appropriateness of security measures by introducing the quantification of IT security benefit. This will allow IT security to be managed more efficiently in the future. The paper is intended as a starting point to define and improve methods and procedures for determining efficient balances between IT security costs and benefits.