Several of the security managers expressed an interest in developing better measurement capabilities so that they could more precisely measure the ultimate benefits and drawbacks of security-related policies and controls--that is, the positive and negative affects of information security on business operations.
Some security managers were interested in better measurement capabilities.
Regardless of the method used to estimate WTP, there are measurement errors, data inadequacies, and ongoing debates about the best practices for each method that contribute to the overall uncertainty of economic estimates.