[Dshield] The Cost of Security

[Chris DeVoney]

At 10:16 AM 11/10/2007, Paul Ferguson wrote:
>- -- Pete Cap <peteoutside at yahoo.com> wrote:
>
> >Does anyone know of any really good whitepapers on evaluating the cost to
> >an organization as a result of network intrusions?
> >
>
>Although this doesn't help very much, this reminds me of one of my
>favorite quotes:
>
>  "The day before a breach, the ROI is zero. The day after, it is
>   infinite."

Go one step further than just security. Consider how IDS contribute 
to compliance mandates. Often, you can scrape more money from people 
when you remind the C-suite people things like IDS helps prevent 
wardrobe color changes.

cdv