Measuring Return on Cybersecurity Investment: Methodologies and Enterprise Adoption
APA Citation
Oliver, T. & Chen, Y. (2024). Measuring Return on Cybersecurity Investment: Methodologies and Enterprise Adoption. *MIS Quarterly*. https://doi.org/10.25300/MISQ/2024/18234
View original paper →What Did This Cybersecurity Research Find?
This cybersecurity investment study evaluated how organizations measure and justify security spending across 250 enterprises. Cybersecurity leaders who framed investments in terms of risk reduction and business enablement secured 34% larger budgets than those using purely technical justifications.
Key Findings
- 1Risk-reduction framing secured 34% larger budgets than technical justifications
- 2Only 22% of organizations had formal cybersecurity ROI measurement processes
- 3The most common ROI metric was annualized loss expectancy reduction
- 4Business enablement arguments (supporting digital transformation) were the most persuasive with boards
- 5Organizations measuring security ROI invested 18% more in security than those that did not
How Does This Apply to Cybersecurity Careers?
CISOs and security managers can adopt ROI frameworks that resonate with executives. Sales professionals can help customers build business cases that win internal budget approval.
Who Should Read This?
senior · management · sales
Frequently Asked Questions
What did this cybersecurity research find?
This cybersecurity investment study evaluated how organizations measure and justify security spending across 250 enterprises. Cybersecurity leaders who framed investments in terms of risk reduction and business enablement secured 34% larger budgets than those using purely technical justifications.
How is this research relevant to cybersecurity careers?
CISOs and security managers can adopt ROI frameworks that resonate with executives. Sales professionals can help customers build business cases that win internal budget approval.
Where was this cybersecurity research published?
This study was published in MIS Quarterly in 2024. The DOI is 10.25300/MISQ/2024/18234. Access the original paper through the publisher link above.
Explore Related Cybersecurity Resources
Was this page helpful?
Research summaries are editorial interpretations of publicly available academic and industry publications. DecipherU is not affiliated with the authors or publishers cited. Verify each referenced study directly before relying on it for career or hiring decisions.
Get cybersecurity career insights delivered weekly
Join cybersecurity professionals receiving weekly intelligence on threats, job market trends, salary data, and career growth strategies.
By subscribing you agree to our privacy policy. Unsubscribe anytime.