Tips for Justifying Security Investments

That’s where many companies I talk to run into an unexpected roadblock. For decades, IT (and IT security) has been treated as a purely technical discipline, and top technical professionals were promoted into IT leadership positions. They can walk you through any sophisticated technology question, but not all of them speak the “business” language. This makes it tough for both sides of the conversation to come to productive decisions.

Another challenge for many IT leaders is a lack of factual data to rely on. In technology, you work with facts, and you have precise and defensible measurements. For example, you can report on the number of incidents over a given period of time, or the time needed to patch a vulnerable server. But how do you show the expected return on a security investment without stepping into the realm of assumptions and probabilities? This pushes a lot of IT pros, myself included, out of their comfort zone.

Cost savings is one of the most obvious measures of ROI, especially when the CIO or head of IT is also responsible for security. If a project enables you to reduce storage space, consolidate licenses, or reduce time and effort through automation, you can calculate the returns with reasonable certainty.

The caveat here is to understand this should never be the only reason for the investment. The main goal of IT security is to manage risk, and you’re doing yourself a disservice with any project that does not start there. However, cost savings works great as an additional reason to invest in something that reduces a risk the company cares about.

More Info: comptia cloud essentials salary

Comments

Post a Comment

Popular posts from this blog

Reasons You Should Care About CompTIA A+

If you’re not already convinced that CompTIA A+ is a great way to launch your IT career, listen to what Zach Hill of I.T. Career Questions has to say. When the CompTIA A+ Core Series (220-1001/220-1002) launched earlier this year, he identified five things that excite him about the certification and why he thinks it’s relevant to today’s entry-level IT jobs, like help desk technician and technical support specialist. "In my opinion, CompTIA has really raised the bar with the new A+ certification,” Hill said in his video. “They have set a new standard while still keeping in mind that this exam is designed and developed for those who are seeking entry-level job roles.” Highlights of the CompTIA A+ Core Series Scripting: You won’t need to become a programmer or know coding inside and out, but you’ll need to understand the basics of how scripting works and the principles of scripting language. Cybersecurity: The CompTIA A+ Core Series has increased its coverage of cybersecurity, incl
Read more

DDoS for hire services

The service is also offering 5%, 7%, 10% and 15% discounts to prospective customers, with a return policy based on the remaining time from the originally purchased package. The service profiled in this post, is the tip of the iceberg when it comes to the overall availability of DDoS for hire managed services within the cybercrime ecosystem. This fierce competition prompts for unique client acquisition tactics, such as offering complete anonymity throughout the purchasing and post-purchasing process in order to ensure that anyone can request any target, including high profile ones, to be attacked. Moreover, although the service is undermining the OPSEC (operational security) of the proposition by advertising on public forums, the business model of the competition is often driven by invite-only sales, where prospective customers are trusted and verified as hardcore cybercriminals with a significant credibility within the cybercrime ecosystem. These competing services even offer the po
Read more

Most IT a+ certification job opportunities

If you are an IT Professional working in an area like Computer Security or Networking, there are lots of certifications to showcase your expertise. In this article, you will find the top 3 CompTIA ®  certifications that will make you a great asset to any company. Cybersecurity is one of the most important focal points for IT departments these days in the wake of rising cyber-attacks that include malicious ransomware attacks, zero-day viruses etc. These attacks can cause firms millions of dollars in damage in terms of data loss and system downtimes. Therefore, firms these days are looking to recruit the best IT talent in order to make the security of their systems and networks more robust. For professionals looking to build a career in cybersecurity by capitalizing on this rising demand for relevant talent, CompTIA offers a dedicated certification path for cybersecurity. These certifications comprise of associate and advanced level certifications and if you want to start out on
Read more