ROSI calculation tool proposal for the Norwegian healthcare sector

Abstract

This master thesis focuses on addressing the need of Sykehuspartner HF, a state-owned business providing ICT services to healthcare providers in Norway, for an accurate tool to calculate Return on Security Investment (ROSI). By developing this tool, we aim to contribute to the research field of cybersecurity by demonstrating how a ROSI calculation tool can be created, thereby assisting others in similar situations. Additionally, we aim to explore the accessibility and applicability of ROSI calculation research in real-world environments, further advancing the knowledge base in this field.

In conjunction with designing the ROSI tool, this thesis provides an overview of state-of-the-art ROSI calculation methods and metrics relevant to state-owned businesses. This overview summarizes key concepts and methods, offering valuable insights for researchers and practitioners.

The main objective is to design a ROSI calculation tool based on best practice algorithms and procedures that can estimate return on investment as accurately as possible within the project's scope. This research contributes to effective decision-making and resource allocation in the realm of cybersecurity for state-owned healthcare ICT services.

Keywords: ROSI calculation, cyber security, state-owned businesses, healthcare ICT services, return on investment, metrics, best practice algorithms, research contribution.