Information system security outsourcing and information sharing level decision

Abstract

Recent information systems investment have focused on outsourcing IS security and supply chain integration.MSSPs are the most efficient way to provide IS security by leveraging the economies-of-scale in providing a critical mass of human Internet security expertise. While information sharing facilitate optimization of security functions, they also exacerbate the information security risk. This paper focus on game problems between enterprise and MSSP. we use differential game to study interaction effect between the MSSPs' input and supply chain integration level, then two cases were analyzed.