ROI is Not the Major Driver for Cybersecurity Investments

Dateline: February 10, 2017

Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend.

With the increased reliance on technology by enterprises of all types comes the increase concern of cyber security.  Ironically, the ROI of security investments are not the key driver of investment in cybersecurity–the risk of a breach is.   Kaspersky Labs published a report on Measuring the Financial Impact of IT Security on Businesses.  They found

The average cost of recovery from a single security incident is estimated to be $86.5K for small and medium businesses and $861k for enterprises.

The most ‘expensive’ attack types are security breaches using zero-day vulnerabilities and targeted attacks. SMBs suffer a lot from exploitation of mobile devices, while enterprises report the high impact of hacktivist activities.

Further the report concludes,

Despite finding it difficult to demonstrate the ROI of investments in IT security to senior management, businesses of all sizes agree that they will continue to invest in improving IT security regardless of ROI, as it is better to be safe than sorry.

What is the cost of a security breach in your organization?  What is the risk of a breach?

That’s a WRAP!  Have a wonderful weekend!

Speak Your Mind