Choosing a Security Solution Using Risk Reduced Per Unit Cost
This IDC study provides a methodology for calculating and then comparing risk reduced per unit cost at multiple levels. Many security programs are refreshing and updating the various solutions they have in place. To do so, they must often compare and contrast different alternatives from a cost and benefit perspective. Since benefit in security corresponds to risk reduction, organizations are challenged to quantify risk even though potential losses can be difficult to determine."Security spending and prioritization decisions provide key insight into measuring risk and expectations in a security program," said Pete Lindstrom, VP of Security Strategies. "It is up to CISOs to recognize this fact and develop their programs using more robust measurement and decision-making platforms."