IDS: RE: Value of IDS, ROI

["John Forristel (SunGard-Chico)" <John.Forristel () sungardbi-tech com>]

Jason,

I've come up against this several times.  There is absolutely no way to
show ROI on IDS.  You can, however, look at it, and show it, from your
own prospective.  I find myself asking CXOs "How much is your company's
reputation worth?  Would it survive if the public found out it had been
hacked?  How many payroll hours would it take to undo the damage?"  That
usually hits home.  

John


-----Original Message-----
From: Jason Patel [mailto:patel1210 () yahoo com] 
Sent: Tuesday, May 03, 2005 11:15 AM
To: focus-ids () securityfocus com
Subject: Value of IDS, ROI



I was wondering how big companies CIO show their executives Return of
investment on IDS. What is the monitoring strategy for IDS alerts. I am
trying to figure monitoring strategy and how to show my executive that
how important job this is, but cant come up with a convincing solution.
Anyhelp is highly appreciated. 

Thanks,

Jason

------------------------------------------------------------------------
--
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708

to learn more.
------------------------------------------------------------------------
--


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------