Greg Young

A member of the Gartner Blog Network

Greg Young
Research VP
6 years at Gartner
22 years IT security

Greg Young is a research vice president in Gartner and the lead analyst for network security. Mr. Young has experience in IT security in product companies, and in both the private and public sectors. He spent his military career in technology security… Read Full Bio

Coverage Areas:

IT Security Is Still A Cost Center

by Greg Young  |  February 17, 2009  |  Comments Off

There is no need to suspend belief in business fundamentals, as IT security is still a cost center.  No amount of voodoo-economic-spin-FUD calculations on avoiding opportunity losses or enabling business to otherwise proceed make sense. 

IT security is a cost.  Costs are required to make profit, but they aren’t profit (unless you are a security vendor). 

If I need a car to go to work, tires are not a profit center.   Adding four more tires does not double my pay.  Taking public transit may lower my costs, but it doesn’t increase my pay.  Buying a second car to keep in your driveway may really help in your reliability to keep your income which is at risk if you are late for work, but is just as effective as keeping $40 in your wallet for cab fare if your car breaks down. 

Creative business cases to obtain funding to get in place the due diligence measures you need are a strategy, not a change in economics.  If a vendor is trying push this kind of economics your way, feel free to show them the door but not before sitting them down on an uncomfortable and tippy stool as you go through the last invoice they sent you.

image

Comments Off

Category: Uncategorized     Tags: