The material recommends hard-headed thinking about security ROI analysis.

• A. True
• B. False
• C. Not stated
• D. Sometimes

Answer: (B)

Evaluating security investments isn’t just about cranking numbers and calling it a day. The idea is to weigh not only the financial return but also the risk context, uncertainty, and the value of reducing potential losses. If you rely only on hard-edged ROI figures, you can miss important factors like how likely a threat is, what a breach would cost in real terms, and the long-term benefits of resilience. The material advocates integrating ROI with risk assessment and business impact, not treating ROI as the sole guide. So, the statement is not accurate—the guidance isn’t to use a rigid, “hard-headed” ROI-only approach, but to balance financial metrics with risk and strategic considerations.