Standardization of Return on Risk Investment Computation
• SEI Report
Publisher
Software Engineering Institute
DOI (Digital Object Identifier)
10.1184/R1/30299998Topic or Tag
Abstract
The SEI’s CERT Division proposes standardizing the computation of ROI in practice and methodology to establish consistent measurement and standardized practice across organizations and communities. This paper explores the benefits of standardizing methodologies and introduces some novel solutions to consider for adoption. More importantly, CERT proposes these ideas while aspiring to establish enduring partnerships across academia, private industry, and the public sector to advance risk-based decision making based on comprehensive quantitative analysis. CERT’s depth of expertise in cybersecurity, risk management, modeling, and measurement would complement the expertise of many other organizations that have similar interests in collaborating to better the greater community.
Cite This SEI Report
Tucker, B. (2025, October 8). Standardization of Return on Risk Investment Computation. Retrieved October 28, 2026, from https://doi.org/10.1184/R1/30299998.
@techreport{tucker_2025,
author={Tucker, Brett},
title={Standardization of Return on Risk Investment Computation},
month={Oct},
year={2025},
institution={Software Engineering Institute, Carnegie Mellon University},
doi={10.1184/R1/30299998},
url={https://doi.org/10.1184/R1/30299998},
note={Accessed: 2026-Oct-28}
}
Tucker, Brett. "Standardization of Return on Risk Investment Computation." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, October 8, 2025. https://doi.org/10.1184/R1/30299998.
B. Tucker, "Standardization of Return on Risk Investment Computation," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 8-Oct-2025 [Online]. Available: https://doi.org/10.1184/R1/30299998. [Accessed: 28-Oct-2026].
Tucker, Brett. "Standardization of Return on Risk Investment Computation." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 8 Oct. 2025. https://doi.org/10.1184/R1/30299998. Accessed 28 Oct. 2026.
Tucker, Brett. Standardization of Return on Risk Investment Computation. Software Engineering Institute. 2025. DOI: 10.1184/R1/30299998. https://doi.org/10.1184/R1/30299998