Think beyond Return on Investment

Cybersecurity is ultimately about the bottom line, but ROI is a difficult measure.
http://www.csoonline.com/article/3200270/network-security/cybersecurity-spend-roi-is-the-wrong-metric.html