Author(s) :

Thomas ACHU UDUO, Raymond NSOR AKPET -OBAJI.

Volume/Issue :

Abstract :

Cybercrime, insider threats, and regulatory pressures continue to rise, driving organisations to spend heavily on security. Nevertheless, many firms are failing to see outcomes in line with this growing investment. Therefore, this article asks, what is the cost of security? By cost, we consider not just financial outlay but organisational resource allocation and the opportunity cost of shifting funds to security from innovation and competitiveness. To answer this question, we conducted a cross-sectoral survey of 220 medium and large firms in finance, healthcare, retail, logistics, and biotechnology. We applied stratified random sampling and structured questionnaires based on the NIST Cybersecurity Framework and ISO 27001. We found that governance-related vulnerabilities are the strongest predictors of organisational risk, but that organisations often share resources unequally, driven more by compliance requirements and firm size than exposure. These findings support proportional, resilience-oriented investments and embedding security within corporate governance and international policy frameworks. Keyword: Security, Risks, Threats, Vulnerabilities, business practices

No. of Downloads :

0