Managing security for information assets is crucial as we rely more on distributed and Internet-accessible systems. A study used a system dynamics approach to evaluate strategies for information security management. The focus was on financial and asset loss perspectives to help managers make better decisions about information security.