Abstract
Risk analysis provides a quantitative means of evaluating potential security investments. Investments should be directed to those areas that offer the greatest return in lowering risk exposure. This presentation will survey approaches that have been used to analyze return on security investments and offer data gathered in academic and commercial settings.