ROI and the InfoSec Value Statement

-
-
- Paisano1
- added this
A value statement connects a project or investment to the mission and values of the organization and there are cases were value overrides financial ROI. A cogent value statement combined with a best-effort ROI can enhance both the bottom line and the security posture of the company by identifying the operational conditions for success.
http://information-security-resources.com/2009/12/20/roi-and-the-infosec-value-s...
http://information-security-resources.com/2009/12/20/roi-and-the-infosec-value-s...