Return On Security Investment (ROSI)

["Galloway, Dan" <Dan.Galloway () VITA VIRGINIA GOV>]

One of my associates will be giving a presentation at the EDUCAUSE
Security Professionals Workshop in Washington this spring on the subject
of Return On Security Investment (ROSI).

 

As part of his research he is trying to find some "real world"
statistics on the actual or estimated cost of security breaches, as well
as the costs associated with defending against security attacks.

 

Since the cost of various security software packages and associated
hardware is pretty easily identified, the cost of the hardware/ software
to protect against security breaches can be estimated. However, finding
the soft costs of security protection, as well as the costs associated
with security breaches, is quite a bit more difficult.

 

If you have any information on this subject, or any suggestions as to
how best to find out some of this information, I would very much
appreciate it if you would let me know. Thanks!

 

BTW, any information you send me will be kept confidential unless you
say otherwise.

 

Yours, 

 

Daniel C. Galloway, Jr.

James Madison University

Commonwealth Information Security Center (CISC)

Institute for Infrastructure and Information Assurance (3IA)

www.jmu.edu/iiia

Richmond Office: (804) 371-5186

Harrisonburg Office: (540) 568-1691

 

 

********** Participation and subscription information for this EDUCAUSE
Discussion Group discussion list can be found at
http://www.educause.edu/cg/. ********** Participation and subscription
information for this EDUCAUSE Discussion Group discussion list can be
found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.