Attack Vectors: The History of Cybersecurity

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2025

M. HaberAttack Vectorshttps://doi.org/10.1007/979-8-8688-1709-0_14

14. Return on Investment

Morey Haber¹  

(1)

Heathrow, Lake Mary, FL, USA

 

There is an unspoken truth for executives in the cybersecurity industry. When selecting a solution for a business use case to mitigate risk, how do you justify its cost? Do you first measure risk and offset the cost of a potential incident to justify the solution? Or do you budget based on the need to satisfy a compliance initiative or audit finding? Truthfully, a CISO can apply many other approaches to justify the cost of a product that a board may accept or reject. However, in this CISO’s opinion, one calculation is emerging ...