Security from an expense to an investment, requires to think of it as a prevention mechanism rather than just a reaction
Cyber security is becoming the most important topic moving forward. It is one of those things that companies do not pay too much attention until there is a cyber attack that disrupts the operations. This blog post is quite important as it explains why security is not an expense but an investment and, as such, it can also be measured to make sure those in the security departments can convince the CFO to start investing. Also, note that when security is perceived as an investment and not an expense, prevention starts playing a role. Until now, companies react to attacks and, thus, their reactions have a cost, which is then perceived as an expense. They have not been investing because they thought it was cheaper to react than to prevent. Now, prevention becomes key and hence the shift from expense to investment.