Guest
Hi I wonder how I should Think when i calculate my ROSI value . If I receive a positive value I should invest in that security correction and if I receive a negative value I should not invest. Have I understood it right?
I would like to request for your comment or idea on which I still doubt on how to check this point "Isolation of Sensitive Systems" - According to identified risks, do sensitive application systems operate in an isolated processing environment?
I would very much appreciate for your kindly comment and any idea.
hi! could you help me with budget dividing into CAPEX and OPEX for ISMS (ISO27001) improving?