Models Evaluating Security Management in Investment Parameter

Abstract

The more companies base their activities on IT systems, the more the value of IT infrastructure and information becomes crucial. Companies try to objectify their investments on IS by calculating levels of required investments based on budget and Return on Security Investment (ROSI). The aim of this paper is to present some traditional, new and applied models of ROSI evaluations and their considerations.