Return On Security Investment (ROSI) - A Practical Quantitative Modell

Organizations need practical security benchmarking tools in order to plan effective security strategies. This paper explores a number of techniques that can be used to measure security within an organization. It proposes a new benchmarking methodology that produces results that are of strategic importance to both decision makers and technology implementers. The approach taken reflects a work-in-progress that is a combination of practical experience and direct research.