Quaderni IRCrES 24 – Chapter 1

Quaderni n. 24

Chapter 1
The economic perspective on cybersecurity

Jeanne C.M. Vallette d’Osia, Elena Ragazzi, Ugo Finardi

CNR-IRCrES, Consiglio Nazionale delle Ricerche – Istituto di Ricerca sulla Crescita Economica Sostenibile, Strada delle Cacce 73, 10135 Torino, Italia

Corresponding author: jeannecharlottemarievallettedosia@cnr.it

 

Abstract

This chapter of the Quaderno IRCrES Cybersecurity and data protection in the electricity sector: state-of-the-art of the literature and evaluation methods reviews the literature on two main aspects, the concepts on which the economic analysis of cybersecurity is built on, and the methods, both theoretical and empirical, developed to assess the value of cybersecurity. Itis therefore divided in two parts. First, regarding the broad perspective of economics applied to cybersecurity, we tackle the discussion on the nature of cybersecurity as a public good, the market failures hampering the right allocation of resources within investment in cybersecure systems, and thus, the regulation policies and general awareness on the topic. Then, we review the approaches and models developed for cybersecurity estimations, followed by a focus on the studies addressing cybersecurity’s value within critical infrastructure sectors. The review demonstrates a literature on the topics of cybersecurity economics already significant, revealing different schools of economics employed in cybersecurity, as well as multidisciplinary approaches and, in turn, various models for cybersecurity investment. Yet, developing economically viable cybersecurity strategies still calls for representative data on cyberattacks as well as the adaptation of evaluation techniques to individual behaviours, and system’s complexity.

Keywords:  Cybersecurity, critical infrastructures, public good, market failures, estimation methods.

 

DOI: 10.23760/2499-6661.2025.24_01

ISBN: 978-88-98193-39-4

ISSN (online): 2499-6661

 

———————–

How to Cite

Vallette d’Osia, J.C.M., Ragazzi, E., & Finardi, U. (2025). The economic perspective on cybersecurity. In Ragazzi, E., Finardi, U., & Vallette d’Osia, J.C.M. (eds.). Cybersecurity and data protection. in the electricity sector. State-of-the-art of the literature and evaluation methods (pp. 11-25). Quaderni IRCrES 24. CNR-IRCrES. http://dx.doi.org/10.23760/2499-6661.2025.24_01