CIOs, IT managers, and security specialists all face difficult questions about security spending. This sample chapter from The New School of Information Security examines justifications for allocating resources for security, discusses ways to determine how much money you should spend, and explains how to decide where that money should be spent (and not spent). The "New School" perspective offers interesting insights that incorporate psychological factors and economic valuation techniques that can keep you from throwing good money after bad.

Title: The New School of Information Security
Authors: Adam Shostack and Andrew Stewart
Chapter 6: "Spending"
ISBN-13: 9780321502780; copyright March 2008 by Addison-Wesley Professional, an imprint of Pearson Education

For more information, visit InformIT. The New School of Information Security is also Safari Books Online-enabled. Owners of the print book will automatically receive access to the online edition for 45 days by following the steps in the back of the book. If you're interested in the online edition but are not yet a Safari subscriber, you can try a free Safari pass.

Go to TechRepublic to read full article ...