ABSTRACT
Finding a return on investment (ROI) has never been easy; and for technology, it has been even more
difficult. To make matters more complicated, the return on security investment (ROSI) has been
nebulous at best. It is easy to say that a Web defacement or hack attack will cause a “loss of customer
confidence,” but what does that really mean? What is the financial impact on an organization if it
experiences a loss of customer confidence? What needs to be determined is the causation of the financial
impact and the event itself.
