Resumen
Assessing the return on investment has always been a sticking point for technology investments. Similar to IT productivity paradox, Return on Security Investment (ROSI) has become a controversial topic due to immense growth of e-businesses. Defining the value of security investments is challenging. However, it is clear that security consumers will need to understand the variables that define ROSI and endure the discomfort of assigning dollar values to quantities that currently are extremely ill-defined. While calculating ROSI seems taxing, increasing possibility and scope of IT security breaches due to increasing interconnectivity makes it imperative that computer viruses and hacking took a $1.6 trillion toll on the worldwide economy and $266 billion in the U.S. Security breaches have a significant impact on the market values of firms too. It is estimated that compromised firms, on average, lost approximately 2.1% of their market values within two days surrounding security breaches. This translates to an average loss of $1.65 billion in market capitalization per incident.