The TCO or Total Cost of Ownership of Security systems and devices are often a hidden and unrecognized cost . The initial costs may be dwarfed by the operational and running costs . This would include management systems ,availability , Changes ,Incidents , Vulnerability and release management, Compliance and breach legislation and delivering the ability to support a unified Cyber Incident Response Strategy . This needs to be part of the risk model, as seen below using the Swiss Cheese Risk model where issues in one layer can be magnified and leverage to create bigger problems if not managed as part of a Cyber Security Solution.
