Save or Share this Report

For Security & Risk Professionals

Determine The Business Value Of An Effective Security Program — Information Security Economics 101

October 2, 2012

Primary author headshot


Why Read This Report

This report outlines Forrester's approach to helping you financially model information security. In today's seemingly never-ending cycle of new technologies, cyberthreats, and regulations, it's almost impossible for CISOs to meet all of the modern organization's security demands. In this difficult environment, senior leadership will evaluate the CISO not only on technical performance but also on how he or she manages information security as a business -- prioritizing expenditures and making tough financial calls. Forrester presents the Information Security Value Model, which you can use to calculate the financial value that information security provides to the business in terms your executive colleagues will understand. With this approach, you'll be able to make tough and effective financial decisions and demonstrate appropriate use of resources.

Get Access

Already a Client?

Log in to read this document.

Become a Forrester Client

Customers are the new market-makers, reshaping industries and changing how businesses compete and win. Success depends on how well and how fast you respond. Forrester Research gives you insights and frameworks aligned to your role to shorten the time between a great idea and a great outcome, helping your teams win in the age of the customer. Contact us to learn more.

Want to know what will happen in 2020? Visit Forrester's Predictions 2020 Hub, where you can read what's coming next in marketing, customer experience, technology, innovation, and more.

Purchase Report

This report is available for individual purchase ($499 USD).


Tools And Templates

Models and Calculators

calculator icon
  • Capture Information Asset Revenue
  • Capture Information Security Costs

Table of Contents

  • CISOs Still Struggle With Security Justification
  • Information Is Now The Product — It Produces The Revenue
  • Show Value With Forrester's Information Security Value Model

  • Use A Sound Financial Model To Drive Security Decisions
  • Supplemental Material
  • Related Research Documents