X. Costs and Benefits
The issue of data
security can be reduced to the desire for data accessibility by an individual
versus the need for data secrecy by an organization. Analysis of
organizational data needs compared with its sensitive data analysis report is
one starting point for doing a cost-benefit analysis. One method for doing this
is a risk matrix model. Information assets can be compared with data threats and
vulnerability. The value of the data is its worth in case of loss. The obvious
difficulties of interpretation do not preclude the use of this method to help in
the decision-making process. The following are important issues for
discussion.
- Accessibility Versus Secrecy: If information is to be used, it must be accessible or users will not avail
themselves of it. If it is too available, it may be distributed to
unauthorized individuals.
- Costs
- Money and time for development, installation, procurement, and
maintenance of security measures
- Special skills
- Performance
- Productivity
- Training time
- Compatibility - of equipment, procedures,...
- Benefits
- Precise definition of requirements
- Value of information
- Peace of mind
- Productivity
- Protection from legal liability
- Protection from loss of control of assets/company
- Good-will
- Privacy
- Individual
- Corporate
- Governmental