<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Full Costs of Information</title>
	<atom:link href="http://philosecurity.org/2008/06/03/full-costs-of-information/feed" rel="self" type="application/rss+xml" />
	<link>http://philosecurity.org/2008/06/03/full-costs-of-information</link>
	<description></description>
	<lastBuildDate>Tue, 08 Nov 2011 22:48:18 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Scoop</title>
		<link>http://philosecurity.org/2008/06/03/full-costs-of-information/comment-page-1#comment-7</link>
		<dc:creator>Scoop</dc:creator>
		<pubDate>Thu, 10 Jul 2008 20:57:29 +0000</pubDate>
		<guid isPermaLink="false">http://memsniff.org/?p=30#comment-7</guid>
		<description>In the absence of government intervention, the insurance industry is in the process of supplying a kind of surrogate for something like the Pigovian taxes you mention, I believe.  The hospital I work for has recently begun to consider purchasing data insurance, to cover losses associated with data breaches.  The cost of coverage will derive in part from an audit of our security  procedures.    I have no doubt that the exercise will be limited, the cost burden inefficient and the analysis in many ways faulty - but, like the daily food supply system for New York City (to borrow one of your elegant analogies) it may suffice - in this case to change corporate behaviour before the breach.
... and thanks for your interesting thoughts!</description>
		<content:encoded><![CDATA[<p>In the absence of government intervention, the insurance industry is in the process of supplying a kind of surrogate for something like the Pigovian taxes you mention, I believe.  The hospital I work for has recently begun to consider purchasing data insurance, to cover losses associated with data breaches.  The cost of coverage will derive in part from an audit of our security  procedures.    I have no doubt that the exercise will be limited, the cost burden inefficient and the analysis in many ways faulty &#8211; but, like the daily food supply system for New York City (to borrow one of your elegant analogies) it may suffice &#8211; in this case to change corporate behaviour before the breach.<br />
&#8230; and thanks for your interesting thoughts!</p>
]]></content:encoded>
	</item>
</channel>
</rss>

