Outsourcing Internet Security: The Effect of Transaction Costs on Managed Service Providers
نویسندگان
چکیده
Transaction costs are a significant factor in outsourcing decisions. In the case of Internet security, outsourcing has higher transaction costs for two major reasons: (1) the outsourcing process is not yet standardized and (2) there is uncertainty about the frequency and impact of cyber attacks creating large variations in coordination costs. In this paper we study the effects of transaction costs on provider pricing strategies aiming toward guidelines that are beneficial for both buyers and providers. We structure a game-theoretic model that incorporates the two special features of transaction costs for security outsourcing. When transaction costs are high, Managed Security Service Providers (MSSPs) have to charge a lower overall price for their services to balance these costs. The same result holds when the uncertainty associated with transaction cost increases. Our conclusion is that while performance-based contracts have to be employed to create an efficient risk-sharing mechanism, market competition provides incentives for MSSPs to share transaction costs with buyers.
منابع مشابه
Outsourcing Internet Security: Economic Analysis of Incentives for Managed Security Service Providers
Firms hesitate to outsource their network security to outside security providers (called Managed Security Service Providers or MSSPs) because an MSSP may shirk secretly to increase profits. In economics this secret shirking behavior is commonly referred to as the Moral Hazard problem. There is a counter argument that this moral hazard problem is not as significant for the Internet security outs...
متن کاملEconomics of Internet Security Outsourcing: Simulation Results Based on the Schneier Model
Dynamic and complex information security risks facing organizations are forcing them to take a hard look at outsourcing to Managed Security Service Providers (MSSPs). The potential advantage of outsourcing is to improve security levels at lower costs. Potential risks of outsourcing to an MSSP includes service quality uncertainty and the business risk of MSSP bankruptcy. In this paper we present...
متن کاملManaging Security Service Providers: Issues in Outsourcing Security
The issue of trust and risk in outsourced relationships was extended beyond traditional outsourcing models with the introduction of Application Service Providers (ASPs). As ASPs evolve, Managed Security Service Providers (MSSPs) have emerged as external providers of security for firms facing increasing information assurance threats. This research-in-progress paper develops a conceptual model of...
متن کاملA Game Theoretic Economics Framework to understanding Information Security Oursourcing Market
On information security outsourcing market, an important reason that firms do not want to let outside firms(usually called MSSPs-Managed Security Service Providers) to take care of their security need is that they worry about service quality MSSPs provide because they cannot monitor effort of the MSSPs. Since MSSPs action is unobservable to buyers, MSSPs can lower cost by working less hard than...
متن کاملHow to improve security by contracting security outsourcing
There is an increasing number of articles and internet forums against outsourcing security and contracting Managed Security Services. In this type of articles and forums, outsourcing providers professionals are presented as a security threat to their customers.(An extreme example of this can be seen at Cio.com Forum (6)). The aim of this paper is to show customers the possible advantages of con...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2005