Security systems are necessary to protect the business operations of a company. At the same time, however, they restrict the range of action that a company can take. Setting up a comprehensive security system therefore requires a very careful decision making process. There is good reason to assume that a clear strategy on which such a decision making process could be based is missing in most companies. In many respects, this situation is reminiscent of the treatment of intellectual property rights.
Background information can be found in this paper.
Students interested in writing a thesis in this area are expected to study the security architecture of different companies and explicate the underlying strategic assumptions on the basis of extant literature on property protection and economic success. A particular focus will be set on companies involved in critical infrastructures, but students are welcome to bring in their own suggestions and ideas.