Defining a Value Proposition for Information Security
Jeffrey L. Ott · Information Systems Security · 2000
A recent conversation with a colleague and friend presented a challenge. What is the value proposition of information security. How does a security professional, whether a consultant, a manager of information systems, or a software developer prepare a cost/benefit analysis or economic justification for one's product or services? After about 15 years in this business, I believed I knew the answer. My friend who has a few more years in the business had just set a trap for me.