Tuck center to study how firms can improve information security

FOR IMMEDIATE RELEASE—April 26, 2007

CONTACT: Kim Keating, 603-646-2733

HANOVER, N.H.—The Center for Digital Strategies at the Tuck School of Business at Dartmouth has been awarded $805,000 through the Institute for Information Infrastructure Protection (I3P) Consortium to study new methods for companies to manage information security risks. The award is supported by the Department of Homeland Security (DHS).

A look at news headlines reveals an array of security breaches in corporations, and firms are under increased pressure to harden their networks and take a more aggressive security posture. However, it is often not clear what security initiatives offer the greatest improvement. While hackers regularly penetrate poorly secured networks and devices, many recent large security breaches were not technical break-ins, but rather inadvertent disclosers.

"Managing information risk across the extended enterprise is a growing, critical concern of managers, and must be considered as part of their overall enterprise risk management strategy," says Professor M. Eric Johnson, director of the center and the principal investigator on the research project. "We are working closely with large firms to help them better manage this risk."

The project is part of a $3.2 million research program, including researchers at Dartmouth College, the Tuck School of Business at Dartmouth, Indiana University, MIT Lincoln Laboratory, RAND Corporation, and the University of Virginia, which will examine the business rational for information security investments. The firms involved in this project include Cisco Systems, Dow Chemical, Eaton, General Motors, IBM, and Staples.

"Addressing real-world problems related to cyber security and infrastructure requires a multidisciplinary approach," says Martin Wybourne, I3P chair and vice provost for research at Dartmouth College. "The unique character of the consortium enables faculty and students from many disciplines to join forces to further our understanding of the issues."

"We value this tie between business and academia and the insight it will generate for all parties," says Mark Hillman, director of global data center operations at General Motors. "The research will help us and other large manufacturers better understand how to collaborate with our business partners." Christopher Dunning, enterprise information security officer at Staples echoed this point, "We strongly support I3P/DHS-funded research on the business impact of information security."

The Center for Digital Strategies promotes the development and practice of digital strategies—the use of technology-enabled processes to harness an organization's unique competencies, support its business strategy, and drive competitive advantage. Through its programs and research, the center examines the impact of technology on all aspects of management and strategy, including supply chain, marketing, and product development. The center also addresses issues throughout the extended enterprise, including globalization, organizational change, and information security.

For more information about the Center for Digital Strategies, visit their website. 

For more information about the I3P, visit their website at www.thei3p.org

Founded in 1900, Tuck is the first graduate school of management and consistently ranks among the top business schools worldwide. Tuck remains distinctive among the world's great business schools by combining human scale with global reach, rigorous coursework with experiences requiring teamwork, and valued traditions with innovation.