In Brief

Reality Check

Advanced concepts for measuring risk and value

By Derek Slater

November 01, 2004CSO — Advanced concepts for measuring risk and value can be useful for CSOs, as are methods for making investment decisions such as portfolio management. But Bill Wipprecht, CSO at Wells Fargo, reminds security pros not to take their eyes off the ball. Wipprecht says security still needs to measure and communicate its value in the most basic terms: dollars saved (through theft prevention) and dollars recovered (through investigations and collections).

"Everybody would like to be considered an investment instead of a cost center, sure," he says. At Wells Fargo, Wipprecht says he tracks "intangible" value provided by the security groupincluding benefits such as employee and customer confidence, the value of a safe workplace, and the safety of intellectual property. "But the bottom line is still tangible saves," he says. In two particular cases last year, the work of Wipprecht's security group saved the company $43 million dollars. Those are the kinds of hard numbers that inspire confidence from upper management.

Other stories by Derek Slater

$firstKeyword

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Security Directions: A Virtual Conference

Security Directions Available On Demand Sept. 30 - Dec. 30

Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.

» Register Now

WEBCAST
Protecting PII: How to Work with IT to Manage Risk

Compuware Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.

» View this Webcast

Featured Sponsors