A Call for a New Cybersecurity Measurement Standard

## Executive summary — The article argues that traditional ROI fails to capture the financial value of cybersecurity because it focuses on revenue rather than losses avoided, and proposes Return on Mitigation (RoM) as a standardized metric to measure mitigated losses, improve budget justification, benchmarking, and communication with stakeholders.