Opportunity Cost and Missed Chances in Optimizing Cybersecurity: The loss of potential gain from other alternatives when one alternative is chosen.

This article focuses on opportunity cost in organizational cybersecurity decision-making. Topics include how to incorporate opportunity cost into routine decision processes, a deeper look into all types of costs that should be considered, and productivity effects as well as benefits when opportunity cost is incorporated into cybersecurity decision-making. Also included, a case study of Twilio, a technology company, and their utilization of NightOwl, an automated testing framework with attack-tree modeling.