{"id":46376,"date":"2022-04-26T22:57:32","date_gmt":"2022-04-26T22:57:32","guid":{"rendered":"https:\/\/www.darkreading.com\/edge-ask-the-experts\/how-do-i-report-my-security-program-s-roi"},"modified":"2022-04-26T22:57:32","modified_gmt":"2022-04-26T22:57:32","slug":"how-do-i-report-my-security-programs-roi","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/how-do-i-report-my-security-programs-roi\/","title":{"rendered":"How Do I Report My Security Program’s ROI?"},"content":{"rendered":"
<\/div>\n

Question: How do I report my security program’s return on investment (ROI)?<\/strong><\/p>\n

John Ayers, Vice President of Product, Advanced Detection & Response, Optiv:<\/strong> Measuring ROI for any security program really starts by stating early and clearly what the desired outcome is that a company is looking to achieve out of said program. This obviously varies on a program-by-program and company-by-company basis. What a $40 billion financial services organization and a $500 million manufacturing organization view as ROI when it comes to security is certain to vary.<\/p>\n

When it comes down to it, however, both of those organizations are looking to reduce and manage their risk. The fundamental goal, despite wildly different budgets and maturity levels, is the same.<\/p>\n

How can we do that?<\/p>\n