# Cybersecurity Access Control: Framework Analysis in a Healthcare Institution
## 4 Discussion
### TCO and ROSI  
The Total Cost of Ownership (TCO) calculation shown in Figure 6 facilitated the analysis of the financial aspects associated with the PBSM and ZTA frameworks. The TCO was established for each model covering a standard five-year life cycle term based on the United States Internal Revenue Service (IRS) published depreciation value [19]. The inflation rate value of 3.1% was derived from the 2023-2024 report by the U.S. Bureau of Labor and Statistics [13]. Taking these inputs (inflation rate and quantity or model) helps avoid some of the common mistakes outlined by [PERSON] [20]. Figure 7 shows the topology of Company X's PBSM, which is divided into two DCs: a core and a perimeter. The provided topology offers an appropriate framework that utilizes an industry-standard model for examining core asset volume, asset type, and associated list price values. The CAPEX and OPEX values, as seen in Appendix A, are derived from products and services sold by a leading cybersecurity vendor based on reports by Gartner and Forrester research firms. While a consumer may have additional requirements depending on its internal needs (which is beyond the scope of this research), Appendix A is intended to provide a glimpse of the values or solutions expected for a range of prices. The TCO analysis, as seen in Table 2, displays CAPEX costs representative of industry standard \"High Availability\" (HA) security clusters (i.e., one synchronized pair of security devices in an environment). Furthermore, Table 2 subdivides each year based on asset quantity, with the sole ongoing CAPEX procurement stretching from years 2 to 5 to accommodate capacity expansion. For instance, each year entails expanding HA cluster capacity by one card, equivalent to an aggregate throughput rate of 13.2 gigabits per second. Figure 5: Company X 2023 remote client support engagements. Figure 6: TCO formula. Figure 7: Company X’s PBSM topology. \begin{table}
\begin{tabular}{l l l l l l l l l l l l l} \hline \hline
**Hardware** & **PISM** & \multicolumn{4}{c}{**Quantity**} & \multicolumn{4}{c}{**ICARTAN**} & \multicolumn{4}{c}{**3.15\% Inflation**} \\ \hline
**Description** & **Date** & **Code** & **CepNoQfx** & **Vv1** & **V2 Qy** &  
The OPEX values account for licensing that follows an annual renewal cadence throughout the hardware's lifespan. The initial hardware support contract encompasses the entire operational duration of the equipment, aligning with a common practice observed in many enterprise organizations. This approach offers cost savings compared to annual support renewals. The Total Cost of Ownership (TCO) for the analysis of the PBSM, based on a 5-year life-cycle term, amounts to United States dollar (USD) 22,906,851.10, with the highest-cost year being year one at USD 9,949,160.00. The organizational structure, host population, and workforce within Company X laid the foundation for implementing a Zero Trust Architecture (ZTA). The topology for this study replicates Figure 7, with the only physical alteration being the removal of the log collection server assets. Cost values for ZTA solutions were derived from the list prices offered by the same cybersecurity vendor utilized for the PBSM. The same vendor is a leader in the industry for ZTA and Secure Access Service Edge (SASE)-based solutions, according to Gartner [5]. Table 3 illustrates an increase in operational expenditures (OPEXs) mainly due to the licensed-based Software as a Service (SaaS) model that encompasses the architecture of the ZTA solution. The reduction in CAPEX comes from eliminating the on-premises logging infrastructure, as this functionality is migrated to the cloud to align with the ZTA solution. A total of 93% of Chief Information Security Officers advocate migrating security assets and services to the cloud to improve organizational efficiency [21]. Aligning with this trend, the financial analysis emphasizes the implementation of a Zero Trust Architecture (ZTA) using a leading ZTA Solution.