| dc.description.abstract | This master thesis focuses on addressing the need of Sykehuspartner HF, a
state-owned business providing ICT services to healthcare providers in Norway,
for an accurate tool to calculate Return on Security Investment (ROSI). By de-
veloping this tool, we aim to contribute to the research field of cybersecurity by
demonstrating how a ROSI calculation tool can be created, thereby assisting
others in similar situations. Additionally, we aim to explore the accessibility
and applicability of ROSI calculation research in real-world environments, further advancing the knowledge base in this field.
In conjunction with designing the ROSI tool, this thesis provides an overview of
state-of-the-art ROSI calculation methods and metrics relevant to state-owned
businesses. This overview summarizes key concepts and methods, offering valu-
able insights for researchers and practitioners.
The main objective is to design a ROSI calculation tool based on best prac-
tice algorithms and procedures that can estimate return on investment as ac-
curately as possible within the project’s scope. This research contributes to
effective decision-making and resource allocation in the realm of cybersecurity
for state-owned healthcare ICT services.
Keywords: ROSI calculation, cyber security, state-owned businesses, health-
care ICT services, return on investment, metrics, best practice algorithms, re-
search contribution. | |