Calculating Return On Mitigation @S4Events
Calculating Return On Mitigation  @S4Events
Uploaded May 2026 | Updated September 2026, 1 week ago
You've identified OT cyber risks and a corresponding list of mitigations to reduce these risks. How do you select what mix of mitigations to do and in what order?

Hector suggests using a Return on Mitigation (RoM) metric to make these decisions. He went over how to use this consequence-based approach to ensure budget is available for the right actions at the right times.

Subscribe to Dale’s ICS Security: Friday News & Notes email here:
friday.dale-peterson.com/signup
Check out S4x27. Feb 8 - 11 in Tampa:
s4xevents.com
Calculating Return On MitigationNIS2 As A Multi-Country Cyber Regulation ExperimentProblem Bringer or Problem Solver #shortsA Tour Of The S4x26 Cabana SessionsFireside Chat: Who Needs To Step Up?OT Incident Impact ScoreAIBOM: Powering Transparency And Security In AI And Software Supply ChainsS4x26 Welcome Keynote: ConnectPOC Pavilion Analysis & OutcomesS4x26: CFP Closed, Tickets Open Sep 15It’s Not As Simple As “Use A Memory Safe LanguageIs Rust Really Safe? #shorts
S4 Events |

Calculating Return On Mitigation

SHARE TO X SHARE TO REDDIT SHARE TO FACEBOOK WALLPAPER