IT security managers face the question when they are defending a budget, especially when seeking an increase. There are some effective answers, according to those on a panel titled Measuring ROI for Cybersecurity: Is it Real, or a Mirage, at the MIT Sloan CIO Symposium this week. Most of them involve putting a value on what if? Fannie Mae uses the FAIR (Factor Analysis of Information Risk) Model that describes what risk is, how it works and how to quantify it.”]
Source: https://www.csoonline.com/article/3198458/cybersecurity-roi-still-a-tough-sell.html