We consider the problem of enforcing compliance with information security policies in organizations in order to mitigate insider threat. We show that compliance with security policies may be enforced even for myopic, self-interested, agents by providing them proper economic incentives for...

Growing complexity of modern information processing systems in many service-oriented industries has resulted in increasing exposure of private information. This has lead to heightened security concerns related to identity theft: an employee has access to too much personally identifiable...