ROI of I.T security investments

Abstract

This report is aimed towards (lOs and IT Managers looking at a framework to calculate ROl on their projects security investments. The report does not provide a "one-size fit all" framework but provides guidelines to make the necessary ROI calculations. The approach used for writing this report was to use a combination of literature survey as well as original analysis to fill in the gaps. The literature survey was done on various online databases like the EBSCO database, besides analyzing research reports from Forrester Research, and research reports from some universities. The report looks at answering the following questions: What does ROI for security investments mean? Why do we need to address ROI for Security Investments? Models for calculating ROI To determine the level of security awareness in IT companies, two surveys were carried out and the results of the surveys form a core part of this report.