Schneier Agrees: Security ROI is “Mostly Bunk” Schneier: No one can generate cash by running a security team; best we can do is save money. Promote centralization and consolidation and consolidating security teams. Simplify and build visibility in your organization, move data around the world when you achieve the goals in the world, if you’re not flying a security person around the globe when you have more data in the data instead of scoping intrusions. This doesn’t mean “security is showing why it is better””]
Source: https://taosecurity.blogspot.com/2008/11/managing-security-in-economic-downturns.html