Cost-effectiveness model for analysing digital security risks and risk management

Kustannus-vaikuttavuus-malli digitaalisen turvallisuuden riskien sekä riskienhallinnan analysointiin (PDF, 1.35 MB)Opens in a new window.

The cost-effectiveness model for analysing digital security risks can be used to examine the effectiveness of digital security measures in relation to their cost.

Maintaining and improving digital security requires resources that must be focused on the most important protected subjects and the most valuable matters of the organisation. In order to identify the most important subjects, an assessment of digital and cybersecurity risks is required and a monetary value calculated for their control measures.

The model consists of the following components:

• Level 1: calculation model for digital security risks
• Level 2: value model for digital security
• Level 3: effectiveness model for digital security.

The model was published as part of the Digital and Population Data Services Agency’s VAHTI operation in November 2023.