From Risk to Return: Measuring Cybersecurity ROI with Data Analytics
summary
Three-step analytics method claims to turn cybersecurity spending into measurable ROI by: defining AS‑IS and TO‑BE maturity, mapping scope/visibility with a hit‑map of top-10 attack scenarios, and ingesting a starter set of incident and boundary data sources (email security, Microsoft 365 telemetry, external/internal scanners, OT/field‑engineer apps). Two case studies—a UK government program and a manufacturing energy company—use the framework to prioritize spend, track a directional reduction in repeated incidents, and secure investment via living visualizations.
AI-written summary · about
chapters (10)
- 0:00Cybersecurity ROI basics
- 1:09Cybersecurity ROI case studies
- 2:14Three-step analytics framework
- 3:19Data maturity stages
- 4:22ROI measurement approaches
- 6:48Visibility and blind spots
- 8:16Data types and risk exposure
- 9:42Top 10 data sources
- 13:14Analytics deployment models
- 14:19Q&A
related talks
28mHow to Tell the Right Cyber-Story to Executives and Board Members
50mBetter Risk Assessment for Cyber Insurance: How Will We Get There?
22mUsing Cyber Data To Financially Quantify Cyber Risk Decisions
52mCybersecurity as a Business Conversation
40mCybersecurity Metrics Development for Board and Risk Committee Reporting
47mYour Cybersecurity Budget Is a Horse’s Behind
30mCybersecurity Silver Linings
40mProtecting What Matters Most – Tools for Managing Risk