NIST’s Ron Ross offers his advice on using cloud as a means to save money and improve IT infrastructure. He encourages the use of automation to increase consistency, effectiveness and timeliness of security control implementation within organizations. But he points out that some automation tools are very expensive. The money saved through the cloud, he says, can be reinvested into stronger cybersecurity measures, including automated tools. Ross: “Buy those automated tools first and they’re going to give you the greatest return on your investment””]
Source: https://www.govinfosecurity.com/risk-management-on-budget-a-5118