27 percent of business executives view security investments as having a negative return on investment (ROI) Just 7 percent of cybersecurity staffers said they believe security investments produce a negative ROI. ROI is the wrong metric for evaluating the efficacy of a digital security program, CSO Online says. Digital security investments dont produce greater profits, but instead contribute to loss prevention, or greater savings in the event of a security incident, the report says. Chief information security officers (CISOs) should consider adopting a zero-trust approach and focusing on people, programs and technology.”]