RoSI — Return on Security Investment

1

What risks are we worried about?

Becomes: the risks that need more analysis or intervention.

Needs

A title and what's in scope (to do) Tailors every AI suggestion to your organisation
How much loss you can tolerate (to do) One number is enough to start
At least one loss scenario (to do) One scenario is enough to start

+ Define scope + Add loss scenario

2

Becomes: the interventions with the largest effect and net value.

Needs

At least one intervention, with its cost (to do) One is enough to start
What it changes (to do) Add an effect: an intervention and a scenario it changes

+ Add intervention + Add effect + Add insurance

3

Becomes: the case for the CFO — return on investment, and risk before and after.

Needs

Opens when 1 and 2 have answers