Showing how security helps business achieve its objectives is a two-step process: Speak the language of business and do cost-benefit analyses that prove value returned.
Large enterprises might monitor millions or even billions of security signals a day. At that scale, you need to set expectations about detection failures.
The massive volume of network transactions, messages and other events that occur in real time makes predicting the risk of an incident difficult, but not impossible.
The 538 March Madness prediction website has used data analytics to change the way fans watch the game. Cyber risk quantification can do the same for security leaders.
Recent examples show that AI and other measurement tools can provide meaningful assessments. Time to make cybersecurity efficacy a thing.