CSOONLINE.com - Metrics/Budgets

IT Security Spending Up For Some

Bill Brenner — Wed, 07 Jan 2009 05:00:00 GMT

Though a new Forrester survey suggests more security spending in 2009 despite the economic downturn, some security professionals see a different story in their own companies. Here's a look at how they're managing.

Who Pushed Vendors Toward Better Security?

Wed, 03 Dec 2008 05:00:00 GMT

Hint: It had something to do with pressure from customers and government agencies, writes Oracle Corp. CSO Mary Ann Davidson.

Rich Mogull: 7 Infosec Trends for 2009

Mon, 17 Nov 2008 05:00:00 GMT

Shrinking budgets, the collapse of the database security market, DLP going mainstream - the former Gartner pundit places his bets for the coming year. (Part of the What Happens Next security predictions series.)

Coviello: Security Spending on Wrong Things

Mon, 27 Oct 2008 04:00:00 GMT

Enterprises need to rethink their security spend to be more proactive and innovative, according to RSA chief executive Art Coviello at the RSA Europe Conference.

The Security Metrics Collection

Mon, 27 Oct 2008 04:00:00 GMT

Numbers are the language of business. Fortunately, security metrics are growing ever more sophisticated. Knowing what to measure, how to measure it and how to communicate those metrics can help improve security's efficiency, effectiveness and standing in the business world.

Security Can Be Measured

Thu, 16 Oct 2008 04:00:00 GMT

Winn Schwartau agrees with Bruce Schneier on security ROI - to a point.

Opposing Forces in a Down Market

Bob Bragdon, Publisher, CSO — Tue, 07 Oct 2008 04:00:00 GMT

CSO Publisher Bob Bragdon observes the classic battle between expense cutting and risk mitigation

Data Security Now 10 Percent of IT Operating Budgets

Fri, 05 Sep 2008 04:00:00 GMT

IT security budgets are on the rise, reflecting growing concern over data breaches and increasing CEO involvement in the task of protecting sensitive data, Forrester Research analysts say.

Ouch! Security Pros' Worst Mistakes

Bill Brenner — Wed, 03 Sep 2008 04:00:00 GMT

We've all done regrettable things on the job, but does any valuable wisdom come of it? Four security pros candidly explain their biggest blunders and what they learned in the process.

Security ROI: Fact or Fiction?

Tue, 02 Sep 2008 04:00:00 GMT

Bruce Schneier says ROI is a big deal in business, but it's a misnomer in security. Make sure your financial calculations are based on good data and sound methodologies.

Data Breach Fallout: Do CISOs Need Legal Protection?

Bill Brenner — Wed, 30 Jul 2008 04:00:00 GMT

Since the security executive is on the hot seat after a data breach, some industry experts suggest CISOs get themselves some form of liability protection. The downside is that such protection could shield those who deserve the blame for an incident.

Cheap IT Security? The Tools Were There All Along

Bill Brenner — Wed, 16 Jul 2008 04:00:00 GMT

With the economy flirting with recession, security pros can't afford the security products they were eying a year ago. Fortunately, there are plenty of cheap tools to ensure a solid defense. Some of these tools have been in the arsenal all along, but you never knew it. (Part four in a series: How to Manage Security in a Recession)

Recession Questions

Derek Slater — Tue, 15 Jul 2008 04:00:00 GMT

Ask yourself these questions to help tune your security operation for maximum efficiency.

Cost-Cutting Through Green IT Security: Real or Myth?

Bill Brenner — Wed, 25 Jun 2008 04:00:00 GMT

Some say the concept of green IT security is a stretch, but others see a real opportunity to cut costs as well as carbon emissions. (Part two in a series: How to Manage Security in a Recession)

Security and Business: Financial Basics

Michael Fitzgerald — Mon, 23 Jun 2008 04:00:00 GMT

You need to find and use the right financial metrics to communicate security's value to your company. Here are pros and cons of four: TCO, ROI, EVA and ALE.