There are many hidden costs to cybersecurity that are hard to quantify but illuminating these costs can go a long way to helping justify security budgets. Here are three hidden costs of incident response: the cost of false positives, dwell time and the costs of discovery dwell time. The cost of trivial-true positives and dwell time is linked to false positives and trivial-false positives. The ratio I suggest is 10:1 for every 10 false positives identified, which only one should be for every one identified.”]
Source: https://www.csoonline.com/article/3270940/the-3-hidden-costs-of-incident-response.html