Real Options Models for Proactive Uncertainty-Reducing Mitigations and Applications in Cybersecurity Investment Decision Making

Michel Benaroch
Corresponding Author
Michel Benaroch
[email protected]
Martin J. Whitman School of Management, Syracuse University, Syracuse, New York 13210
Search for more papers by this author

Michel Benaroch

Corresponding Author

Michel Benaroch

[email protected]

Martin J. Whitman School of Management, Syracuse University, Syracuse, New York 13210

Search for more papers by this author

Published Online:22 Feb 2018https://doi.org/10.1287/isre.2017.0714

Supplemental Material

isre.2017.0714-sm.zip (609 KB)

Cited by
- A cyber risk economics model for organization-wide risk management (CYREM-ORM)
  Computers & Security, Vol. 165
- Enhancing Cybersecurity Investment with FAIR-ROSI: A Responsible Cybersecurity Approach to Digital Society
  8 July 2025 | Information Systems Frontiers, Vol. 28, No. 2
- Wirtschaftliche Rechtfertigung von Cybersicherheitsinvestitionen – eine systematische Literaturanalyse zu Cybersicherheitskennzahlen
  22 April 2026 | HMD Praxis der Wirtschaftsinformatik, Vol. 63, No. 2
- It’s Showtime: Live-Streaming E-commerce and Optimal Promotion Insertion Policy
  8 February 2024 | Production and Operations Management, Vol. 35, No. 2
- A Probabilistic Framework for Forecasting Cryptographic Security Under Quantum and Classical Threats
  6 February 2026 | Symmetry, Vol. 18, No. 2
- Cost of Not Investing (CONI) in Intelligent Processes Automation
  17 January 2026
- Cybersecurity Challenges and the Role of Machine Learning in Decision-Making Among Indian SMEs
  1 April 2026
- Zero Trust in Practice: A Mixed-Methods Study Under the TOE Framework
  14 November 2025 | Journal of Cybersecurity and Privacy, Vol. 5, No. 4
- Business email compromise: A systematic review of understanding, detection, and challenges
  Computers & Security, Vol. 158
- Optimal information system security investment: A control-theoretic approach to balancing continuous maintenance and periodic upgrades
  European Journal of Operational Research, Vol. 147
- Beyond Risk: A Measure of Distribution Uncertainty
  Tao Lu,
  Lihong Zhang,
  Xiaoquan (Michael) Zhang,
  Zhenling Zhao
  21 August 2024 | Information Systems Research, Vol. 36, No. 2
- Real Options: Connecting with Other Perspectives and Exploring New Frontiers
  Academy of Management Perspectives, Vol. 39, No. 2
- Decision Support Systems Enhanced by Machine Learning in Cybersecurity
  3 May 2025
- Fuzzy Logic System-Based Decision Systems for Proactive Cybersecurity Risk Management
  3 May 2025
- The whole of cyber defense: Syncing practice and theory
  The Journal of Strategic Information Systems, Vol. 33, No. 4
- Cybersecurity Resilience in SMEs. A Machine Learning Approach
  1 September 2023 | Journal of Computer Information Systems, Vol. 64, No. 6
- Integrated model to optimize supplier selection and investments for cyber resilience in digital supply chains
  International Journal of Production Economics, Vol. 275
- Information Security Research in the Information Systems Discipline: A Thematic Review and Future Research Directions
  31 July 2024 | ACM SIGMIS Database: the DATABASE for Advances in Information Systems, Vol. 55, No. 3
- Enhancing Vulnerability Prioritization in Cloud Computing Using Multi-View Representation Learning
  4 September 2024 | Journal of Management Information Systems, Vol. 41, No. 3
- A typology of disinformation intentionality and impact
  20 December 2023 | Information Systems Journal, Vol. 34, No. 4
- Cybersecurity and executive compensation: Can inside debt-induced risk aversion improve cyber risk management effectiveness?
  International Review of Financial Analysis, Vol. 93
- Creating Proactive Cyber Threat Intelligence with Hacker Exploit Labels: A Deep Transfer Learning Approach
  1 March 2024 | MIS Quarterly, Vol. 48, No. 1
- Improving Threat Mitigation Through a Cybersecurity Risk Management Framework: A Computational Design Science Approach
  19 February 2024 | Journal of Management Information Systems, Vol. 41, No. 1
- Geschäftsmodelle vom Typ Anything-as-a-Service (XaaS) – Eine Analyse auf der Basis von Realoptionen
  30 April 2024
- Status Quo, Advances and Futures of Machine Learning in Fault Detection and Diagnosis for Energy: A Review
  10 August 2024
- Information System Approaches in Cybersecurity
  Procedia Computer Science, Vol. 234
- The influence of investment lag on company value in a non-financing constrained region
  3 June 2022 | Asia-Pacific Journal of Accounting & Economics, Vol. 30, No. 6
- The S curve: A dynamic view of in ERP evaluation
  13 May 2023 | The Engineering Economist, Vol. 68, No. 3
- Space economy: a new frontier of information systems, analytics and digital commerce
  22 November 2022 | Industrial Management & Data Systems, Vol. 123, No. 2
- Cybersecurity capabilities and cyber-attacks as drivers of investment in cybersecurity systems: A UK survey for 2018 and 2019
  Computers & Security, Vol. 124
- Cyber Risk Assessment and Optimization: A Small Business Case Study
  IEEE Access, Vol. 11
- A closer look at organizational cybersecurity research trending topics and limitations
  11 November 2022 | Organizational Cybersecurity Journal: Practice, Process and People, Vol. 2, No. 2
- Relationship Structure Analysis on Determinants of Enterprise Information Security Investment Decision Based on ISM
  IEEE Engineering Management Review, Vol. 50, No. 3
- Sustainable energy development under uncertainty based on the real options theory approach
  17 November 2021 | International Journal of Environmental Science and Technology, Vol. 19, No. 7
- Tackling uncertain future scenarios with real options: A review and research framework
  27 May 2022 | The Irish Journal of Management, Vol. 41, No. 1
- A Model for Managing the Procedure of Continuous Mutual Financial Investment in Cybersecurity for the Case with Fuzzy Information
  17 January 2022
- Information technology and destination performance: Examining the role of dynamic capabilities
  Annals of Tourism Research, Vol. 91
- Editorial for the Special Section on Humans, Algorithms, and Augmented Intelligence: The Future of Work, Organizations, and Society
  Hemant Jain,
  Balaji Padmanabhan,
  Paul A. Pavlou,
  T. S. Raghu
  30 September 2021 | Information Systems Research, Vol. 32, No. 3
- The SPIDER Cyber Security Investment Component (CIC)
- Data Security, Data Breaches, and Compliance
- Firm investment decisions for information security under a fuzzy environment: a game-theoretic approach
  26 August 2020 | Information & Computer Security, Vol. 29, No. 1
- An Integrative Review and Analysis of Cybersecurity Research: Current State and Future Directions
  14 May 2020 | Journal of Information Systems, Vol. 35, No. 1
- An efficient data flow material model (DFMM) for cyber security risk assessment in real time server
  Materials Today: Proceedings, Vol. 37
- The impact of information sharing legislation on cybersecurity industry
  Industrial Management & Data Systems, Vol. 120, No. 9
- Semi-Supervised Cyber Threat Identification in Dark Net Markets: A Transductive and Deep Learning Approach
  18 November 2020 | Journal of Management Information Systems, Vol. 37, No. 3
- When to Play Your Advertisement? Optimal Insertion Policy of Behavioral Advertisement
  Subodha Kumar,
  Yinliang (Ricky) Tan,
  Lai Wei
  9 June 2020 | Information Systems Research, Vol. 31, No. 2
- Information Technology Governance: Reflections on the Past and Future Directions
  21 October 2019 | Journal of Information Systems, Vol. 34, No. 2
- Investigating the intertwining impact of wholesale access pricing and the commitment to net neutrality principle on European next-generation access networks private investment plans: An options-game application for capturing market players' competitive interactions
  Telecommunications Policy, Vol. 44, No. 3
- LiSRA: Lightweight Security Risk Assessment for decision support in information security
  Computers & Security, Vol. 90
- Combined Stochastic Process and Value at Risk: A Real-World Information System Decision Case
  30 December 2019 | Entropy, Vol. 22, No. 1
- Investment portfolio analysis by using neural networks
  9 May 2019
- Information sharing and bullwhip effect in smart destination network system
  Ad Hoc Networks, Vol. 87
- Development of Sectoral Intellectualized Expert Systems and Decision Making Support Systems in Cybersecurity
  29 August 2018
- Cybersecurity insurance and risk-sharing
  Journal of Accounting and Public Policy, Vol. 37, No. 6
- Risk Assessment Uncertainties in Cybersecurity Investments
  9 June 2018 | Games, Vol. 9, No. 2

cover image Information Systems Research

Volume 29, Issue 2

June 2018

Pages iii-vi, 253-523

Article Information

Supplemental Material

Metrics

Information

Received:March 02, 2015
Accepted:January 19, 2017
Published Online:February 22, 2018

Cite as

Michel Benaroch (2018) Real Options Models for Proactive Uncertainty-Reducing Mitigations and Applications in Cybersecurity Investment Decision Making. Information Systems Research 29(2):315-340.

https://doi.org/10.1287/isre.2017.0714

Keywords

PDF download

Available Issues

Available Issues

Available Issues

Available Issues

Available Issues

Real Options Models for Proactive Uncertainty-Reducing Mitigations and Applications in Cybersecurity Investment Decision Making

Supplemental Material

Volume 29, Issue 2

Article Information

Supplemental Material

Metrics

Information

Cite as

Keywords

Sign Up for INFORMS Publications Updates and News