Improving the ROI of the security management process
This article provides a number of guidelines for improving the ROI of the information security process. Where security initiatives are concerned, an important component of this ROI is realised in the form of risk mitigation and it is important to include this as an explicit factor in the ROI calculation. This calculation need only be sufficiently accurate to support the decision making process. Distinguishing between tactical and strategic initiatives will enable organisations to respond to short-term business drivers without interrupting strategic projects. Organisations will then be able to concentrate on re-engineering current processes in order to better align them with business needs.
roi security management