Justifying ECRM Funding

Last spring, I read a WSJ article that quoted a CISO saying, "Even in a good economy, people are trying to grow the business, that's what they want to put their funds into. Security may be important, but security doesn't make revenue."2 If you read Chapter 1 , you know I disagree. Security can preserve and generate revenue and enable business growth in numerous ways. You can't afford to get stuck in a security-is-a-cost-center mindset.