RETURN ON INFORMATION SECURITY INVESTMENTS: Myths vs Realities.

In this article the author examines various myths and realities about returns on information security investments (ROSI). Some of the areas discussed include accounting and economic rates of return, an evaluation of ROSI, some objectives of information security investments, measurement of actual performance of information security investments and the level of corporate investments in information security.