EP 34: Assessing Cyber Risk in OT Systems

One of the problems with security is ROI. If I put in next gen this and next gen that and no security events happen, am I justified in making those expenditures? How do you quantify a risk like that?

cyber cyber risk events gen making next ot systems problems risk roi security security events systems