Submission Summary: 0 pending, 6 declined, 1 accepted (7 total, 14.29% accepted)
UM_Maverick writes: Does anybody out there have any experience measuring Return on Investment for security-related expenditures? For example, if a PHB says that there's $1 million left in the budget, and you can either implement a new customer tracking system that is projected to save $300k per year, or implement a new security technology or process, how do you measure the return on the security spend, and convince the PHB that it's at least worth considering? Googling for "Measuring Security ROI" seems to just produce a list of articles that say "Measuring security ROI is difficult." Does anybody have some more direct experience or information?