Ledger

Enter the risk it prevents and the cost it carries — the ledger settles whether it pays for itself.

01 Risk exposure without this control

Expected incidents per year (before)

Average loss per incident

Annualized loss expectancy (ALE) without this control: —

Currency

Analysis period

One-time investment cost

Annual recurring cost (support, licensing, staffing)

/ yr

Risk reduction from this control — how much it cuts the annual loss

Annualized loss expectancy (ALE) with this control: —

Risk exposure without this control —

Risk exposure with this control —

Cost of the solution —

Net benefit —

POSITIVE ROI

ROSI

—

Return on security investment.

Net benefit

—

Risk avoided minus cost, over the period.

Payback

—

Time for avoided losses to cover the cost.

Copied to clipboard