Statistics prepared by the Federal Bureau of Investigation reveal that
the average robbery involves about $3,000, the average white collar c
rime involves $23,000, and the average computer crime, $600,000. Manag
ers who realize the benefits of information resources continue to spen
d large sums on computerization. But they don't always promote informa
tion security to a level satisfactory for their organizations. This pa
per outlines the major economic considerations of information security
and suggests a simple framework for integrating information security
measures in information systems.