As initially noted, the origin of the discussion with regard to the ex-ante evaluation of IT and IT security (ITS) investments can be traced back to the late 1980s, and has been addressed consequently ever since. In God we trust, all others bring data.– William Edwards Demming American ...