This master thesis focuses on addressing the need of Sykehuspartner HF, a state-owned business providing ICT services to healthcare providers in Norway, for an accurate tool to calculate Return on Security Investment (ROSI). ...