Lawrence A. Gordon

About

Dr. Lawrence A. Gordon is the EY Alumni Professor of Managerial Accounting and Information Assurance at the University of Maryland's Robert H. Smith School of Business. He is also an Affiliate Professor in the Institute for Advanced Computer Studies, an Affiliate Researcher at the Maryland Cybersecurity Center, and a faculty member in the ACES program offered by UMD’s Honors College. He earned his Ph.D. in Managerial Economics from Rensselaer Polytechnic Institute. Dr. Gordon is an internationally recognized scholar in managerial accounting and cybersecurity economics, with research focusing on economic aspects of cybersecurity, corporate performance measures, cost management systems, and capital investments. He is known for his pioneering work in cybersecurity economics, including the development of the Gordon-Loeb Model, which provides an economic framework for determining optimal cybersecurity investments and is widely referenced in the field. His research emphasizes the importance of accounting and economic considerations within an interconnected digital economy, and he has contributed significantly to policy discussions, including providing Congressional testimony on cybersecurity economics. Dr. Gordon has authored over 100 articles published in leading journals and several books, and he has served in editorial roles for prominent academic publications. His work has been recognized with numerous awards, and he is frequently invited to speak at universities and…

Research topics

• Computer Science
• Computer Security
• Business
• Economics
• Risk analysis (engineering)
• Engineering
• Finance
• Law
• World Wide Web
• Engineering management

Selected publications

• The impact of information sharing on cybersecurity underinvestment: A real options perspective

  Journal of Accounting and Public Policy · 2015-06-23 · 115 citations

  article1st author
  PublisherDOI

• Integrating cost–benefit analysis into the NIST Cybersecurity Framework via the Gordon–Loeb Model

  Journal of Cybersecurity · 2020 · 107 citations

  1st authorCorresponding

  Abstract The National Institute for Standards and Technology (NIST) Cybersecurity Framework has rapidly become a widely accepted approach to facilitating cybersecurity risk management within organizations. An insightful aspect of the NIST Cybersecurity Framework is its explicit recognition that the activities associated with managing cybersecurity risk are organization specific. The NIST Framework also recognizes that organizations should evaluate their cybersecurity risk management on a cost–be…

  PublisherDOI

• Investing in Cybersecurity: Insights from the Gordon-Loeb Model

  Journal of Information Security · 2016-01-01 · 77 citations

  articleOpen access1st authorCorresponding

  Given the importance of cybersecurity to the survival of an organization, a fundamental economics-based question that must be addressed by all organizations is: How much should be invested in cybersecurity related activities? Gordon and Loeb [1] presented a model to address this question, and that model has received a significant amount of attention in the academic and practitioner literature. The primary objective of this paper is to discuss the Gordon-Loeb Model with a focus on gaining insight…

  PublisherOA PDFDOI

• Increasing cybersecurity investments in private sector firms

  Journal of Cybersecurity · 2015-11-26 · 62 citations

  articleOpen access1st authorCorresponding

  The primary objective of this article is to develop an economics-based analytical framework for assessing the impact of government incentives/regulations designed to offset the tendency to underinvest in cybersecurity related activities by private sector firms. The analysis provided in the article shows that the potential for government incentives/regulations to increase cybersecurity investments by private sector firms is dependent on the following two fundamental issues: (i) whether or not fir…

  PublisherOA PDFDOI

• Cybersecurity insurance and risk-sharing

  Journal of Accounting and Public Policy · 2018-11-01 · 59 citations

  article
  PublisherDOI

Frequent coauthors

• Martin P. Loeb

  51 shared

• Lei Zhou

  Shanghai Jiao Tong University

  16 shared

• William Lucyshyn

  12 shared

• Herbert Lin

  Stanford University

  8 shared

• Andrew W. Stark

  University of Bern

  6 shared

• Chih‐Yang Tseng

  National Taiwan University

  5 shared

• Tashfeen Sohail

  Brock University

  5 shared

• Stephen E. Loeb

  University of Maryland, College Park

  5 shared

Awards & honors

• Recognition in the NSA’s 2016 Annual Best Scientific Cyberse…

Similar researchers at University of Maryland, College Park

• James McKinneyh-73
• Jingyi Qianh-46
• Xin Zhaoh-30