Using time-driven activity-based costing to manage digital forensic readiness in large organisations

Authors:
K. Reddy;H. S. Venter;M. S. Olivier
Affiliations:
Information and Computer Security Architectures Research Group, Department of Computer Science, University of Pretoria, Pretoria, South Africa;Information and Computer Security Architectures Research Group, Department of Computer Science, University of Pretoria, Pretoria, South Africa;Information and Computer Security Architectures Research Group, Department of Computer Science, University of Pretoria, Pretoria, South Africa
Venue:
Information Systems Frontiers
Year:
2012

Citing 11
Cited 1

Using simulation to benchmark traditional vs. activity-based costing in product mix decisions

WSC '94 Proceedings of the 26th conference on Winter simulation
Extending Simulation Modeling to Activity-Based Costing for Clinical Procedures

Journal of Medical Systems
The merger of discrete event simulation with activity based costing for cost estimation in manufacturing environments

Proceedings of the 32nd conference on Winter simulation
Determining the cost of IT services

Communications of the ACM
Security attribute evaluation method: a cost-benefit approach

Proceedings of the 24th International Conference on Software Engineering
Analyzing security costs

Communications of the ACM - E-services: a cornucopia of digital offerings ushers in the next Net-based evolution
Developing an activity-based costing approach for system development and implementation

ACM SIGMIS Database
Simulation in java with SSJ

WSC '05 Proceedings of the 37th conference on Winter simulation
Towards a taxonomy for information security metrics

Proceedings of the 2007 ACM workshop on Quality of protection
Activity Based Costing of IT

EQUITY '07 Proceedings of the 2007 IEEE International Conference on Exploring Quantifiable IT Yields
Case study: Network intrusion investigation - lessons in forensic preparation

Digital Investigation: The International Journal of Digital Forensics & Incident Response

Information systems frontiers editorial December 2012

Information Systems Frontiers

Quantified Score

Hi-index	0.00

Visualization

Abstract

A digital forensic readiness (DFR) programme consists of a number of activities that should be chosen and managed with respect to cost constraints and risk. Traditional cost systems, however, can not provide the cost of individual activities. This makes it difficult or impossible for organisations to consider cost when making decisions about specific activities. In this paper we show that the relatively new cost system, time-driven activity-based costing (TDABC), can be used to determine the cost of implementing and managing activities required for DFR. We show through analysis and simulation that the cost information from a TDABC model can be used for such decisions. We also discuss some of the factors that ought to be considered when implementing or managing the use of TDABC in a large organisation.