Myth – Cybersecurity is a Cost Center

1
(No Transcript)
2
Cost reduction is not revenue
Cybersecurity seen as a cost/risk reduction
Difficult to quantify Return on Security
Investment (ROSI)
Growth comes first, Profitability/stability is a
secondary imperative
Cost reduction increases profitability, But it
does not lead to growth
3
Rethink cost center as value center
Define value to business beyond gut feeling
Cost of reputation
Compliance cost
Operational cost
Regulatory risk
4
Rethink cost center as value center
Evaluate security processes to reduce friction

• Understand user priorities

• Security processes can't negatively impact

EDR policy that blocks commonly used files
because they are suspicious
App developers who will resent security if it
gets in the way
5
Rethink cost center as value center
Eliminate tool duplication
Develop business metrics to illuminate results
6
Dont be like Sisyphus
7
Cyber security is a value center