Measuring IT Value

Managers responsible for computer security are increasingly required to justify their budget requests in purely economic terms. A survey of IT executives found that 55 percent of respondents indicate their organizations use ROI as a metric, 28 percent use IRR, and 25 percent use NPV.

Source: 2004 CSI/FBI Computer Crime and Security Survey