The Business Justification for Data Security is one of our more important pieces of research. It describes how to evaluate data security investments, map the potential investment to your business needs, then build a business justification case. It starts with a discussion of data security issues, then reviews alternative models (and their flaws), and finishes presents our justification methodology. Attached is the Whitepaper.

Thanks to our sponsor, McAfee. (Like all our research, this was developed independently from our sponsor). Please feel free to add comments or make suggestions, which we will consider for any upcoming revisions to the paper.

(Version 1.0; February 2009)