Posted by:
admin
17 years, 1 month ago
I'm short on time, but I did want to do a quick post about Pete Lindstrom's post on ROSI. He makes a good point about effieciencies. But there are three ways a company creates value:So, to add to Pete's list of ways to justify investment in security, I add:
4. You agree that projects that are riskier are worth less than projects that are not, all other iterms being equal and thus it makes sense to invest more in a project to reduce the risk.
In general, this is why I prefer EVA or NPV to ROI measures: they do a better job of including the drivers of value.
Past posts about ROI, economics and information security are here. Share on Twitter Share on Facebook
