CEOs Don’t See Value In Security
Look closely at the CEO Report Card listed by Zalud and Maddry in their article in this month’s Security Magazine and you’ll notice that Value gets a "D." All of the grades on the report card are the aspects of
security most closely associated with cost: cost of protection measures, cost of threat avoidance, cost of insurance premiums, costs of time and education.
I think there is only one grade on that report card that ultimately matters, and that’s the last one: Helping Grow the Business. Security is not the Point.