Which of the following is BEST to include in a business case when the return on investment (ROI) for an information security initiative is difficult to calculate?

Which of the following is BEST to include in a business case when the return on investment (ROI) for an information security initiative is difficult to calculate?

  • Estimated reduction in risk
  • Estimated increase in efficiency
  • Projected costs over time
  • Projected increase in maturity level