CIO's spend money to implement security. More money spent makes them feel more secure. The security world is filled with complex confusing product offerings. CIO's are often trapped to spend on products that bring little value. Moreover, it is very difficult to measure ROI of  a security budget and this leads to further confusion.  The strong basis of a security budget is risk reduction. Well, how much of money are you willing to spend on your car insurance? - An amount that justifies risk and not a penny more.

My good friend Rajesh Chairman of Cignex was my inspiration to write this series  on Simplified Security - 25 tips for a company to implement security - I have created a seperate blog section for this. The 25 tips are generic and can be drilled down to arrive at a fitting solution based on the company's context. I am fairly confident that these tips will form the basis for a cost effective and risk reducing security implementation.