IT professionals know the importance of security but that doesn’t mean those at the top – the ones who ultimately control the purse strings and determine what gets spent on protecting your data – are necessarily going to understand and allocate the necessary funds.
This article provides some guidelines for demonstrating the very real ROI that you get when you invest in better security. Check it out here:
http://www.darkreading.com/operations/the-roi-of-infosec-11-dos-and-donts-for-management-buy-in/a/d-id/1324451?