Quaderni IRCrES 24 – Chapter 4

Quaderni n. 24

Chapter 4
Methods to assess the economic value of cybersecurity

Jeanne C.M. Vallette d’Osia, Ugo Finardi, Elena Ragazzi

CNR-IRCrES, Consiglio Nazionale delle Ricerche – Istituto di Ricerca sulla Crescita Economica Sostenibile, Strada delle Cacce 73, 10135 Torino, Italia

Corresponding author: jeannecharlottemarievallettedosia@cnr.it

Abstract

This chapter of the Quaderno IRCrES on Cybersecurity and data protection in the electricity sector: state-of-the-art of the literature and evaluation methods focuses on demonstrating the suitability of the Cost-Benefit Analysis (CBA) approach for assessing the value of cybersecurity in electrical infrastructures, from the perspective of citizens. Given the absence of market data for such non-market goods, we argue for the validity of Stated Preferences methods, particularly discrete choice experiments. We review the existing literature applying CBA methods to cybersecurity before narrowing our focus to works evaluating the economic valuation of electricity service continuity. This body of work is largely composed of case studies focused on specific countries or environments and discusses the relative merits of willingness to pay versus willingness to accept. Despite a growing interest in the economic implications of service interruptions, our review reveals a consequential gap: the absence of studies examining power outages caused by cyberattacks on critical electricity infrastructures. This highlights an urgent need for further research at the intersection of cybersecurity and energy system resilience.

Keywords:  Cybersecurity, electricity continuity, cost-benefit analysis, stated preferences methods, discrete choice experiments.

 

DOI: 10.23760/2499-6661.2025.24_04

ISBN: 978-88-98193-39-4

ISSN (online): 2499-6661

 

———————-

How to Cite

Vallette d’Osia, J.C.M., Finardi, U., & Ragazzi, E. (2025). Methods to assess the economic value of cybersecurity. In Ragazzi, E., Finardi, U., & Vallette d’Osia, J.C.M. (eds.). Cybersecurity and data protection. in the electricity sector. State-of-the-art of the literature and evaluation methods (pp. 53-63). Quaderni IRCrES 24. CNR-IRCrES. http://dx.doi.org/10.23760/2499-6661.2025.24_04