Return On Security Investment (ROSI) A Practical Quantitative Model
Wes R. Sonnenreich, Jason Albanese, Bruce D. Stout · 2005
Organizations need practical security benchmarking tools in order to plan effective security strategies. This paper explores a number of techniques that can be used to measure security within an organization. It proposes a new benchmarking methodology that produces results that are of strategic importance to both decision makers and technology implementers. The approach taken reflects a work-in-progress that is a combination of practical experience and direct research.