A model of return on investment for information systems security

Due to the increased need for connectivity with customers, suppliers, and other third parties, most organizations have to implement security controls, which require certain costs and budgets. The decision making process in adopting suitable security programs and solutions becomes related to the return on security investment (ROSI). This paper proposes a model to quantify ROSI for every organization for security threats