infonet-economy

Nowadays BYOD and mobile work are a reality even if they challenge traditional security perimeters and risk management that mainly focus on the threats that these mobile opportunities create. They do not consider their potential benefits, e.g., if a user cannot work when being paid then the productivity is lower. It is the reason that in this paper we introduce a new risk management model, called OPPRIM, where opportunities are also taken into account. We first start by surveying previous work showing that opportunities have been underestimated. Then we detail our OPPRIM model. Finally we present the results of our evaluations through a user survey, quantitative data analysis at company level and simulations. For further enhancements, we have released an open-source OPPRIM simulator of more than 30 000 lines of Java code available on Github.