An ounce of prevention vs. a pound of cure: How can we measure the value of IT security solutions?
Ashish Arora, Dennis E. Hall, Cesar Ariel Pinto, Dwayne Ramsey, Rahul Telang · University of North Texas Digital Library (University of North Texas) · 2004
This article discusses a framework to evaluate the costs and benefits of IT security solutions using a company's risk profile. This method uses an unconventional concept of benefit based on risk avoided rather than increased productivity.