There have been a few headlines lately reporting how blockchain technology and smart contracts will add an astounding business value. For instance, McKinsey reports that blockchain-based smart contracts can save nearly $50 Billion in B2B transactions. Further, Accenture suggests that...

The Banking Executive Accountability Regime was enacted in February 2018; a month later the Australian Prudential Regulation Authority released a consultation draft of its new Prudential Standard CPS 234 on information security. It requires that an APRA-regulated entity ‘clearly define the...

Insurers currently constrict coverage for losses involving electronic information in traditional insurance product lines. As a result, insurance customers are driven to the brave new world of non-standardized varieties of cyber-risk insurance policies. That world abounds with coverage gaps as...

Cybersecurity breaches may be correlated due to geography, similar infrastructure, or use of a third-party contractor. We show how a copula model may be used to estimate the probability of an attack where breaches may be correlated among firms. Losses arising from cybersecurity breaches have an...

Cyberattacks present existential challenges for U.S. national security and economic interests, yet Congress has failed to adopt a comprehensive regulatory framework to secure private-sector information and systems. To fill that gap, state legislatures have passed many laws that regulate data...

Developments in information and communications technology, infrastructure improvements and technology adoption in the last decade have significantly changed the lives of the people and provided new opportunities for consumers and businesses. It brings consumers online and familiarity and comfort...

Recent research has begun to focus on the factors that cause people to respond to phishing attacks as well as affect user behavior on social networks. This study examines the correlation between the Big Five personality traits and email phishing response. Another aspect examined is how these...

School districts rely on information systems to a similar extent as private, business organizations, yet the rules and regulations to ensure that school districts maintain adequate security to prevent data breaches and theft have failed to keep pace with private-sector developments. Advances in...

On Friday, February 10, 2012, the Silicon Flatirons Center at the University of Colorado Law School convened leaders from government, industry, and academia to discuss the cybersecurity challenges to United States critical infrastructure. After discussing the current market incentive structure,...