...understanding the way that such matters are influenced is a good start, and having an understanding of how to evaluate technologyinvestments would also be a help. I suppose that one of the problem we have in security is the difficulty in measuring the...
http://www.computerweekly.com/blogs/stuart_king/2007/10/more-on-roi.html