Re: How to measure 'status' of IDS Deployment

From: Frank Smith (fsmith@hoovers.com)
Date: 08/26/02 

Date: Mon, 26 Aug 2002 10:50:49 -0500
From: Frank Smith <fsmith@hoovers.com>
To: focus-ids@securityfocus.com

--On Sunday, August 25, 2002 18:16:41 -0700 Mike Lyman <mlyman87-security@attbi.com> wrote:

> On 8/23/2002 at 9:23 AM idsquestions@hushmail.com wrote:

>> How do you, perhaps as a ROI issue, justify the money spent and compare
>> your deployment to established(?) benchmarks?
>
> Since you are not making any money with IDS, can you really get a return on your investment?
>
> Mike Lyman

You don't have to make money to get an ROI, if you can cut expenses (i.e.
less time and money spent cleaning up) then you can have a positive ROI.
Of course, if your breakins are rare and easy to clean up after, then you
could easily have negative ROI if you spend a lot buying, configuring, and
monitoring your IDS.
   As with almost anything else, the answer is 'it depends'.

Frank 

--
Frank Smith                                            fsmith@hoovers.com
Systems Administrator                                 Voice: 512-374-4673
Hoover's Online                                         Fax: 512-374-4501

Relevant Pages

  • Re: From the IIUG Insider ...
    ... IF THERE AREN'T ANY CUSTOMERS BESIDES WALMART, ... Do you know why IBM sings the praises of IDS? ... Evangelists cost money, more money ...
    (comp.databases.informix)
  • RE: How does and IDS help to save money??
    ... customer of mine and then generalized to be included as part of my ... How does and IDS help to save money?? ... > Do You Yahoo!? ...
    (Focus-IDS)
  • Re: Informix beats Oracle
    ... Why would IDS be important? ... Does it save them money? ... I've developed apps, business relationships, and real billable ... This goes hand-in-hand with a real, live, developer program with IDS marketing ...
    (comp.databases.informix)
  • RE: How does and IDS help to save money??
    ... How does and IDS help to save money?? ... Do You Yahoo!? ...
    (Focus-IDS)
  • Re: Your choice, CISCO, ENTERASYS or ISS IDS?
    ... > thank you save your money is not going to work. ... if your CIO thinks that security comes by boxes ... >>> Network and Host based IDS? ... >> you delay the procurement until competent staff byus WHAT THEY NEED. ...
    (comp.security.misc)