How to Sell the Value Of Information Security – The four “Rs”

Good article, that talks about:   Risk, Reputation, Regulation, Revenue