Measuring Your Cybersecurity Return on Investment
Analyzes measuring Your Cybersecurity Return on Investment and evaluates key implications for security practitioners.
Summary
## Overview Alan Alford (TrustMap) interviews ISS global CISO Martin Peterson on quantifying cybersecurity ROI for boards and IT committees.
## Maturity-Based Framing ISS maps NIST maturity scores (e.g., moving from 3.0 to 3.5) and ties investments to risk likelihood and impact calculations. Peterson keeps comparative cost figures in mind when weighing a $200K versus $1M annual license.
## Categories Beyond NIST "Resilience" is elevated beyond the NIST Recover function to cover business continuity expectations regulators and customers now demand. Red-teaming and breach-attack simulation inform where spend delivers the most risk reduction.
## Takeaways ROI conversations work when security leaders translate controls into maturity gains, quantified risk reduction, and prioritized spend—not vanity metrics.
Related talks
Videos·41 min
Engineers explore architecture and security mechanisms for Hacking Harms! Measuring The Impact And Harm From Cyberattacks by Emma Raffray.
Videos·41 min
Winn Schwartau
Presenters detail vulnerability discovery and exploitation in Winn Schwartau Keynote Measuring Risk with Time Based Security.
Videos·44 min
Kibana Meters
Industry experts analyze emerging threats surrounding Kibana Meters & Gauges: Measuring Security Control Performance with AttackIQ.