# Economics of Cybersecurity

**Source**: https://learningforlife.tudelft.nl/economics-of-cybersecurity/
**Parent**: https://learningforlife.tudelft.nl/our-courses/ai-data-computer-science/

## Customize Economics of Cybersecurity

ECYB1p-bundle-product-of-EOC1x 

Economics of Cybersecurity: Foundation and Measurement   +
Free
 

Quantity

ECYB2p-bundle-product-of-EOC1x 

Economics of Cybersecurity: Users and Attackers   +
Free
 

Quantity

ECYB3p-bundle-product-of-EOC1x 

Economics of Cybersecurity: Business Strategies and Policy Interventions   +
Free
 

Quantity

### Your Customization

### Economics of Cybersecurity

Summary

# Economics of Cybersecurity

Share webpage

- Explain security failures with concepts like incentives, information asymmetry, externalities, moral hazard, and network effects.
- Describe the economic effects of regulation, liabilities and standards on structure of markets relevant to cyber security.
- Understand and explain behavioral patterns of users and attackers in enterprise environments.
- Apply course concepts to evaluating cyber security policies and controls, determine which factors will contribute positively or negatively to cybersecurity.
- Identify solutions to better address cyber security issues - from the perspective of government as well as organizations.

### Start date Sep 24, 2025

€ 3.100,-

€ 3.435,-

10%
off

program content

3 Courses

- Type
  Programme
- Location
  Online
- Pacing
  Instructor-paced
- Length

  For instructor paced courses this is the length of the course.

  For self-paced courses this is the length of the course if you spend the amount of time per week as specified. You're free to go faster or slower as you see fit.

  18 Weeks
- Effort
  4 - 6 Hours per week

Add to Cart

- [Group discounts](https://learningforlife.tudelft.nl/service-contact/discounted-group-fee/)

Loading...

Subscribe to back in stock notification 

Subscribe

- [Michel van Eeten](https://learningforlife.tudelft.nl/instructors/michel-van-eeten/)
- [Daniel Woods](https://learningforlife.tudelft.nl/instructors/daniel-woods/)
- [Simon Parkin](https://learningforlife.tudelft.nl/instructors/simon-parkin/)
- [Rolf van Wegberg](https://learningforlife.tudelft.nl/instructors/rolf-van-wegberg/)
- [Rainer Böhme](https://learningforlife.tudelft.nl/instructors/rainer-boehme/)
- [Tyler Moore](https://learningforlife.tudelft.nl/instructors/tyler-moore/)

### Programme

Develop your expertise with multiple courses at a discounted price.

- Overview

  **This program trains professionals in business and government to understand root causes for breaches and design better solutions to protect organizations and the wider ecosystem.**

  Security failures in organizations are often caused by bad economic incentives rather than bad technical measures. This program trains professionals in business and government to understand root causes for breaches and design better solutions to protect organizations and the wider ecosystem.

  Organizations face cybersecurity threats with potentially devasting and costly consequences. Yet, they often struggle to identify and implement the right measures. How much to invest in security? How to assess the security of suppliers? How can you measure the effectiveness of security controls? How to align security with the business strategy? What interventions get your employees to behave more securely? How do attackers choose their targets? Can regulations protect me against insecure products?

  For all these questions, economic thinking is not only valuable, but necessary. Security is the product of tradeoffs made under imperfect information and misaligned incentives. This series provides three courses that enable you to diagnose these issues and design solutions that make organizations more cyber secure.

  The course series allows professionals to more effectively manage the cybersecurity risks facing their organization and the wider ecosystem in which they operate.

  We will include case studies and live webinars with the lecturers designed to foster collaboration, spark idea exchange, and support assignment discussions. While attendance is encouraged, these events are not mandatory. Assignments will receive individual feedback.

  With new laws like NIS2 requiring cybersecurity training, the program is ideal for professionals in management, IT, auditing, compliance, risk governance and related fields. By the end, you'll be prepared to proactively address cybersecurity challenges and enhance your organization's resilience against threats.
- Details

  **Program Structure**\
  You can enroll in our courses separately but if you join the full program you will follow the courses as scheduled below, and you will benefit from our bundle price.

  - The first course on **Foundation and Measurement** provides you with foundational micro-economic concepts to explain security behavior of various actors involved securing the organization – internally, like IT and business units, and externally, like suppliers, customers and regulators. Next, it equips you with a causal framework to understand how to measure the effectiveness of security controls, as well as what measurements are currently available. More information
  - The second course on **Users and Attackers** presents a wealth of insights on the individuals involved in security: from user behavior to the strategies of attackers. Contrary to popular opinion, users are not the weakest link. If you want to know why do users not follow company security policies, you need to look at the costs imposed on them. On the side of the attackers, there are also clear incentives at work. The course covers the latest insights on attacker behavior. More information
  - The third course on **Business Strategies and Policy Interventions** covers answers to overcome the incentive misalignment and information problems at the level of organizations and at the level of markets. Starting with the standard framework of risk management, the course unpacks how to identify solutions in risk mitigation and risk transfer and where risk acceptance might be more rational. Finally, we need to address market failures, since they end up undermining the security of firms and society at large. More information
- Qualifications

  If you successfully complete this program you will earn a Professional Education Certificate and you are eligible to receive 7.5 Continuing Education Units (CEUs).

  - [View a sample certificate](https://s.db28b32f9.entry.domains/typo3/Documents/specimen-certificate-2023.pdf)
- Admission

  This program consists of 3 courses.

  This program is primarily geared towards working professionals.\

  ##### Prerequisites

  - None.

## What our learners say about us

- > I love that all that knowledge from reputable international universities is readily available for me to absorb.
  >
  >
  > Eveline Daems - The Netherlands

  [Read the full story](https://learningforlife.tudelft.nl/learner-stories/eveline-daems/)
- > I found the required readings specially insightful, but the lectures were extremely useful as well.
  >
  >
  > Roy Ricaldi - The Netherlands

  [Read the full story](https://learningforlife.tudelft.nl/roy-ricaldi/)
- > All the courses in the program are well-structured, ensuring that all the concepts are highly engaging.
  >
  >
  > Grzegorz Czapliński - Singapore

  [Read the full story](https://learningforlife.tudelft.nl/learner-stories/grzegorz-czaplinski/)

[Economics of Cybersecurity: Foundation and Measurement](https://learningforlife.tudelft.nl/economics-of-cybersecurity-foundation-and-measurement/) 

Start date Sep 23, 2026

4 - 6 Hours per week

€ 916,-

€ 1.145,-

20%
off

 

[Economics of Cybersecurity: Users and Attackers](https://learningforlife.tudelft.nl/economics-of-cybersecurity-users-and-attackers/) 

Start date Jan 20, 2027

4 - 6 Hours per week

€ 1.145,-

 

[Economics of Cybersecurity: Business Strategies and Policy Interventions](https://learningforlife.tudelft.nl/economics-of-cybersecurity-business-strategies-and-policy-interventions/) 

Start date Mar 25, 2026

4 - 6 Hours per week

€ 1.145,-