Which term determines the expected fiscal gains for improvements and balances that against the cost of implementing the changes?

• A. Return on Investment (ROI)
• B. Net Present Value (NPV)
• C. Exposure Factor (EF)
• D. Magnitude of Impact (Risk Impact)

Answer: (A)

Evaluating whether improvements are worth the cost relies on measuring profitability of the change. Return on Investment directly compares the expected financial benefits from a project to what it costs to implement it, giving you a clear sense of whether the investment pays off. It’s the straightforward ratio that shows, for each unit of currency spent, how much gain you expect to receive, making it a practical tool for quick funding decisions in security projects.

The idea is simple: net benefits (the gains you expect) divided by the cost of the change. If the result is positive and high, the improvement is worthwhile; if it’s low, the project may not be attractive.

Net Present Value looks at the value of future cash flows today, accounting for the time value of money, which is more precise over a project’s lifetime but isn’t the same as a simple gains-to-cost ratio. Exposure Factor measures potential loss severity from a risk event, not the return of an investment. Magnitude of Impact describes how severe a risk is, again not about financial return.