---
id: 1296
title: "ROI Isn’t Cutting It: 6 Questions to Help CISOs Better Quantify Security Investments"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/roi-isnt-cutting-it-6-questions-help-cisos-better-quantify-security-investments"
published_at: "2025-01-07 19:07"
tags: ["risk-management", "metrics", "ciso", "security-metrics", "hackerone", "roi", "security-investment", "return-on-mitigation"]
phying_url: "https://phying.com/item/1296"
lang: en
---

# ROI Isn’t Cutting It: 6 Questions to Help CISOs Better Quantify Security Investments

## Summary

HackerOne introduces Return on Mitigation (ROM), which counts mitigated losses as returns instead of net profit, and offers six questions to help CISOs quantify security investments.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2025-01-07 19:07
- **Original:** https://www.hackerone.com/blog/roi-isnt-cutting-it-6-questions-help-cisos-better-quantify-security-investments
- **Phying News:** https://phying.com/item/1296