ROI of network security inplementations

[e.pelser]

I'm trying to convince a client to get a security audit done on their current network security. Are there any utilities available to assist in calculating the ROI of network security.

[rrbleeker]

The only way to find out the benifit of network security is a risk assessment. If you don't know the risks and associated vulnerabilities, you cannot determine if a security implementation is cost effective.

[e.pelser]

Thanks for the response. Can you recommend any good documentation for some ideas how to get this through to the client.

Thanks

[ktimm]

Here is a link to an IDS ROI article. It goes through the basics of Risk assessment as well.

http://online.securityfocus.com/infocus/1608