1403 A Study of the Cost Structure Quantification with the Organization Formation in CSIRT : ROI Visualization of Information Security Management System

Abstract

In general, it is said that the information security field is difficult to visualize and calculate the cost-effectiveness. In this paper, the method for spread and promoting the CSIRT (Computer Security Incident response Team) activity which copes with it in a team about various threats on the Internet is proposed. Concretely, its attention is directed to the cost structure of CSIRT. The costs of CSIRT activity were not clarified sufficient until now. On the other hand, quantification of the structure, i.e., visualization, is performed in this paper. Accordingly, a decision of a manager is made easy and it contributes to spread and promotion of CSIRT.