Cybersecurity Economics and Supply Chain

Analyse cybersecurity’s economic impact, managing supply chain risks and budgeting for security.

Key Details

This module is delivered in hybrid format, as a combination of online, in-person and self-learning activities. The module uses innovative hybrid learning methods that combine live (synchronous) and self-paced (asynchronous) activities, with particular focus on practical activities and real-world scenarios connected to cybersecurity. Expert tutors guide students through the material, ensuring a comprehensive learning experience.

This module aims to equip students with comprehensive knowledge of the economic aspects of information security and supply chain cybersecurity. Toward this goal the module employs periodic quizzes, seminar work and assignments.

Time commitment:

• Online activities: 7 hours
• In-person activities: 7 hours
• Self-learning: 28 hours
• Individual, team and guided projects and activities: 58 hours
• Total: 100 hours

Credit points:

• 4 ECTS

Grading:

• Lecture quizzes: 10%
• Seminar work: 10%
• Assignments: 30%
• Exam: 50% (scenario essay, quiz)

Subjects covered

• Introduction to Cybersecurity Economics
• Cost of Cyber Incidents: direct and indirect costs of cyber incidents
• Case studies on data breaches and ransomware attacks
• Case studies on other cybersecurity events
• Economic Impact of Cyber Threats on Organizations
• Investment in Cybersecurity. How Much is Enough?
• Economics of Cybersecurity Frameworks and Standards
• Supply Chain Cybersecurity Risks and Vulnerabilities
• Cybersecurity in the Supply Chain
• Economic Implications of Supply Chains
• Understanding the financial and strategic impact of cybersecurity across supply chains
• Future Trends in Cybersecurity Economics

Learning objectives

Apply economic analysis techniques to assess the financial impact of cyber incidents on organizations and supply chains.

Evaluate different cybersecurity investment scenarios to determine optimal budget allocation for security controls and risk mitigation.

Analyze vulnerabilities and risks in supply chain cybersecurity, including third-party risks, and recommend mitigation strategies based on economic impacts.

Utilize frameworks and standards to develop cost-effective cybersecurity strategies aligned with organizational goals.

Interpret emerging cybersecurity trends and technologies to anticipate their economic effects on organizational investments and supply chain resilience.

Module leaders

Florin Daniel ANTON obtained his MSc. degree in Automatic Control in 2003, and the Ph.D. degree in “Automatic Control” in 2008 of the University Politehnica of Bucharest, Faculty of Automatic Control and Computers. Socrates scholarship at the “Université de Valenciennes et du Hainaut-Cambrésis (UVHC)”, ENSIAME faculty (2003). Since 2003 he is engineer at the University Politehnica of Bucharest, Faculty of Automatic Control and Computers where he teaches courses and laboratory classes for: Computer Systems Security and Information Systems Security, Robotics and Artificial Vision. Scientific Director of five national research grants, and team member in 16 scientific projects in national and international R&D programs. Author and co author of over 80 scientific papers in the field of security, robotics, artificial vision, distributed information systems, high availability and fault-tolerant systems, disaster recovery published in national and international monographs, journals and conference proceedings. Member of the National Organizing Committees of IFAC IAD 2003, RAAD 2005 and 2009 conferences. Session chairman in the conferences: RAAD 2006 and MITIP 2007. System engineer and Linux trainer in the IBM Linux Competency Centre in Bucharest, he received the RedHat Certified System Engineer certification in 2008.