Many organizations do not have established processes or methods for making decisions about security investment, and they are unsure about how much and in what areas they should invest. In this session, we will explore how user companies should make investment decisions through discussions with participants.