Abstract
Effective information assurance (IA) is the key to reliable management decision-making, customer trust, business continuity, and good governance in all sectors of industry and public service. Yet making a business case for IA investments can be difficult because the scope of the potential benefits can be very broad. Based on interview data collected from company executives, senior IA managers, and a variety of external stakeholders, we develop and discuss a four-layer model that can be used to help structure the case for IA investments.