Watch this video on YouTube
What poses the MOST significant difficulty in determining return on investment (ROI) within the security domain?