Strategic Data Access Management
23 Pages Posted: 11 Dec 2022 Last revised: 18 Dec 2022
G Charlson
University of Oxford - Department of Economics; University of Cambridge - Cambridge-INET Institute
Ruslan Momot
University of Michigan, Stephen M. Ross School of Business
Marat Salikhov
New Economic School; SKOLKOVO Moscow School of Management
Date Written: December 4, 2022
Abstract
A recent survey showed that 33% of businesses grant their employees access to all company data, with at least another 35% granting accesses to more data than is needed. Such overly permissive data access strategy allows the firms to run more efficiently, but at the same time, such strategies present growing cybersecurity risks. With work-from-home becoming more popular, remote employees are being increasingly exploited by the malicious adversaries to gain access to their organizations' data. To address this issue, we investigate the optimal design of data access architectures -- who should have access to what data. Our economic model captures a firm managing a set of employees and a set of datasets. For each employee the firm chooses which datasets this employee should have access to. An employee may be attacked by a potentially sophisticated adversary whose goal is to steal all their data. Therefore, the firm trades off the efficiency benefit of the more permissive data access architecture with the adversarial risk it incurs. We characterize the firm's optimal data access architecture and investigate how it depends both on the adversarial environment and the firm's technology.
Keywords: cybersecurity strategy, data access management, bipartite graphs
JEL Classification: D21, D85, L23, M11, M12, M15, M21, M54
Suggested Citation: Suggested Citation
G Charlson
University of Oxford - Department of Economics ( email )
10 Manor Rd
Oxford, OX1 3UQ
United Kingdom
University of Cambridge - Cambridge-INET Institute ( email )
Sidgwick Avenue
Cambridge, CB3 9DD
United Kingdom
Ruslan Momot (Contact Author)

University of Michigan, Stephen M. Ross School of Business ( email )
701 Tappan Street
Ann Arbor, MI MI 48109
United States
HOME PAGE: http://www.ruslanmomot.info
Marat Salikhov
New Economic School ( email )
100A Novaya Street
Moscow, Skolkovo 143026
Russia
HOME PAGE: http://www.nes.ru
SKOLKOVO Moscow School of Management ( email )
1st km of Skolkovo highway
Odintsovsky District
Moscow 115035
Russia
Do you have a job opening that you would like to promote on SSRN?
Paper statistics
Related eJournals
-
Risk Management eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS4,720PAPERS15,885This Journal is curated by:Jacob Boudoukh at Interdisciplinary Center (IDC) Herzliyah, Robert Sales at Global Association of Risk Professionals -
Economics of Networks eJournal
Economics of Networks eJournal
Subscribe to this free journal for more curated articles on this topic
FOLLOWERS2,735PAPERS14,430This Journal is curated by:Nicholas Economides at New York University - Leonard N. Stern School of Business - Department of Economics -
Operations Research eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS899PAPERS2,542 -
Manufacturing, Service, & Supply Chain Operations eJournal
Manufacturing, Service, & Supply Chain Operations eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS855PAPERS1,612 -
Microeconomics: Decision-Making under Risk & Uncertainty eJournal
Microeconomics: Decision-Making under Risk & Uncertainty eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS838PAPERS8,188This Journal is curated by:Victor Ricciardi at Tennessee Tech University -
Operations Management eJournal
Operations Management eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS798PAPERS2,736 -
Operations Strategy eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS785PAPERS1,185 -
Technology, Operations Management & Production eJournal
Technology, Operations Management & Production eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS774PAPERS1,546 -
Economics of Innovation eJournal
Economics of Innovation eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS349PAPERS19,782 -
Innovation & Management Science eJournal
Innovation & Management Science eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS288PAPERS7,149 -
Cybersecurity, Privacy, & Networks eJournal
Cybersecurity, Privacy, & Networks eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS259PAPERS3,338 -
Strategy & Microeconomic Policy eJournal
Strategy & Microeconomic Policy eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS246PAPERS1,308 -
Investments eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS234PAPERS3,653 -
Cybersecurity & Data Privacy Law & Policy eJournal
Cybersecurity & Data Privacy Law & Policy eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS206PAPERS6,243This Journal is curated by:Candice Hoke at Cleveland State University, Cleveland-Marshall College of Law, Brian Ray at College of Law, Cleveland State University -
Decision-Making & Management Science eJournal
Decision-Making & Management Science eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS147PAPERS4,312 -
Data Science & Analytics eJournal
Data Science & Analytics eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS94PAPERS2,328 -
Decision-Making in Operations Research eJournal
Decision-Making in Operations Research eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS89PAPERS1,823 -
Information Policy & Ethics eJournal
Information Policy & Ethics eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS58PAPERS1,886 -
Libraries & Information Technology eJournal
Libraries & Information Technology eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS44PAPERS4,198 -
Other Production & Operations Management eJournal
Other Production & Operations Management eJournal
Subscribe to this fee journal for more curated articles on this topic
FOLLOWERS20PAPERS524