The Problem with Cyber Security ROI

CISOs being asked those questions should look beyond the topic itself and face the underlying issues it might be hiding....