Operational stability is the value
Measuring return on investment can be a frustrating task in security. The more effective you are, the less you must show for it. In most cases, arbitrary metrics serve as a proxy for actual value, such as cost avoidance or risk reduction. The issue with these is apparent when the budget is tight and costs must be reduced. It’s hard to take the revenue of something not happening to the bank. Instead, other business units show gains based on the security team’s ability to prevent a cyber attack from taking their system offline.
To read this article in full, please click here
