Investment in IT Security: Do we Reap as Much as we Sow?
Primary Investigator:
Research Independant
Swarnalakshmi Iyer
Abstract
Trends from the past five years show a consistent rise in the amount spent on IT Security. On the other hand, the losses from cyber breaches have also consistently risen. Do we get our money's worth with the investments in IT Security? The Return On Security Investment (ROSI) Model and the Gordon-Loeb Model provide a way to perform cost-benefit analysis for IT Security Investments. This research attempts to validate these models using figures from past data.