Netskope named a Leader in the 2022 Gartner® Magic Quadrant™ for Security Service Edge. Get the Report.

  • Products

    Netskope products are built on the Netskope Security Cloud.

  • Platform

    Unrivaled visibility and real-time data and threat protection on the world's largest security private cloud.

Netskope Named a Leader in the 2022 Gartner Magic Quadrant™ for SSE Report

Get the report Go to Products Overview
Netskope gartner mq 2022 sse leader

Netskope delivers a modern cloud security stack, with unified capabilities for data and threat protection, plus secure private access.

Explore our platform
Birds eye view metropolitan city

Make the move to market-leading cloud security services with minimal latency and high reliability.

Learn more
Lighted highway through mountainside switchbacks

Prevent threats that often evade other security solutions using a single-pass SSE framework.

Learn more
Lighting storm over metropolitan area

Zero trust solutions for SSE and SASE deployments

Learn more
Boat driving through open sea

Netskope enables a safe, cloud-smart, and fast journey to adopt cloud services, apps, and public cloud infrastructure.

Learn more
Wind turbines along cliffside
  • Our Customers

    Netskope serves more than 2,000 customers worldwide including more than 25 of the Fortune 100

  • Customer Solutions

    We are here for you and with you every step of the way, ensuring your success with Netskope.

  • Training and Certification

    Netskope training will help you become a cloud security expert.

We help our customers to be Ready for Anything

See our Customers
Woman smiling with glasses looking out window

Netskope’s talented and experienced Professional Services team provides a prescriptive approach to your successful implementation.

Learn more
Netskope Professional Services

Secure your digital transformation journey and make the most of your cloud, web, and private applications with Netskope training.

Learn more
Group of young professionals working
  • Resources

    Learn more about how Netskope can help you secure your journey to the cloud.

  • Blog

    Learn how Netskope enables security and networking transformation through security service edge (SSE).

  • Events & Workshops

    Stay ahead of the latest security trends and connect with your peers.

  • Security Defined

    Everything you need to know in our cybersecurity encyclopedia.

Security Visionaries Podcast

Episode 15: Building Permanent Security Awareness

Play the podcast
Black man sitting in conference meeting

Read the latest on how Netskope can enable the Zero Trust and SASE journey through security service edge (SSE) capabilities.

Read the blog
Sunrise and cloudy sky

SASE Week

Netskope is positioned to help you begin your journey and discover where Security, Networking, and Zero Trust fit in the SASE world.

Learn more
SASE Week

What is Security Service Edge?

Explore the security side of SASE, the future of network and protection in the cloud.

Learn more
Four-way roundabout
  • Company

    We help you stay ahead of cloud, data, and network security challenges.

  • Why Netskope

    Cloud transformation and work from anywhere have changed how security needs to work.

  • Leadership

    Our leadership team is fiercely committed to doing everything it takes to make our customers successful.

  • Partners

    We partner with security leaders to help you secure your journey to the cloud.

Netskope enables the future of work.

Find out more
Curvy road through wooded area

Netskope is redefining cloud, data, and network security to help organizations apply Zero Trust principles to protect data.

Learn more
Switchback road atop a cliffside

Thinkers, builders, dreamers, innovators. Together, we deliver cutting-edge cloud security solutions to help our customers protect their data and people.

Meet our team
Group of hikers scaling a snowy mountain

Netskope’s partner-centric go-to-market strategy enables our partners to maximize their growth and profitability while transforming enterprise security.

Learn more
Group of diverse young professionals smiling

The Key Mechanics of Building a Good Security Business Case 

Nov 08 2022

As we enter the thick of budget season, especially in a time where budgets are expected to start tightening, security and IT leaders need to anticipate the discussions they are going to have  with executive leaders. This means proactively preparing a formal business case for the security program to ensure funding for upcoming projects.

But, you may be asking yourself, what are the key elements I need to include in my business case in order to “sell” executive leadership on my security program? I recently wrote an article for HelpNet Security talking about specific tips to consider when making a business case for security, but I want to dig a little deeper on the key mechanics of a winning business case.

In my experience as a cybersecurity leader, there are three core sections that you need to keep in mind when it comes to crafting a winning business case: 

  • Current situation and strategic opportunity 
  • Financial highlights 
  • Recommended alternative

WIth those elements in mind, I will give you a quick rundown of how each of these core sections should function in your business case.

Current situation and strategic opportunity

First, outline the current situation and strategic opportunity. This is your chance, through a written dialogue, to relay the importance and benefits of your project. It should be concise, hard hitting, and include current metrics. If there are customers that require this or information on your competitors’ capabilities, this would be the time to mention it.   

Outline the key assumptions that you have made during the building of this business case. For example, these assumptions include resources in the IT team or other groups that will be available as needed to assist in the deployment, or if the organization will continue to grow through M&A. Although, be careful to not make an assumption that, if not true, will completely negate your business case. For instance, if you say that you assume that your organization will continue to grow through M&A and the business does not have any plans for M&A, then unless you only need the new service for that one purpose, I would not state that as an assumption, as they may not approve the project based on the M&A assumption. 

You will also want to describe the vision of the new service as it relates to the business. How does the project provide business value and what are the expected outcomes? The outcomes will be your measure of success after the project is complete. There should be clear indication of the metrics that you will use to measure the success. Always be careful if part of your business case is to decommission a prior service, so you allow time to complete the decommissioning. All too often the decommission is delayed or sometimes not done at all, which then leads to higher than expected costs. 

Financial highlights

Once you have described the project, benefits, and outcomes, now it is time to lay out the financial picture of the recommended solution. It’s good to start this off by answering big questions, such as: 

  • What are the requirements for personnel? 
  • What support teams do you need? 
  • What are the capital requirements and operating expense costs? 
  • What savings do you expect after the project is complete?   

In this section you want to be very clear about the benefits and costs. Post implementation this is where the review team will focus on whether you delivered on the benefits, if the cost was in line with what was promised, and if the new service is fully functional for all of the business.  

Include the hard financial analysis, as appropriate, such as return on investment (ROI), total cost of ownership (TOC), net present value (NPV), internal rate of return (IRR), and the computations that back up your analysis. In most security projects you won’t have NPV or IRR calculations.  

There are often benefits and costs that are not covered as part of the financial calculations such as soft costs and side benefits. A short description of those benefits, such as increased efficiency, regulatory compliance, etc., is appropriate at this point. It is good to mention those, but don’t rely on them as your cost justification. 

Now that you have laid out the current situation, the opportunity for improvement, and the financial analysis, now it is time to describe the suggested alternative. Describe the solution and the vendor that will be used. If you plan to have consulting services to help get the product running or perform ongoing maintenance, include this in the description and the financial analysis. You will also want to discuss the threat and risks to the project’s success, as well as controls and security processes that will be implemented as part of the project.     

Provide a brief outline of the process used to select the recommended solution. How was the list of competitors created?  How did you select the final providers? Did you do a proof of value test?  

Along with the description of the selected solution include all of the key technology features, and if there are any reasons why the vendor provides additional benefits. For example, these might include if they are a Gartner Magic Quadrant leader, already implemented in other parts of the business, other products from the vendor that are currently deployed, they are a current customer, etc.  

Once these core mechanics of the business case are complete then it is time to submit for review. Remember the tips provided in the article and socialize your business case with the key stakeholders and approvers well ahead of time. Let me know if my tips were useful and/or you have some you would like to add. Good luck! 

author image
James Christiansen
James Christiansen is Netskope’s vice president of cloud security transformation and leader of the Global Chief Strategy Office. He is focused on enhancing Netskope’s global clients understand the challenges and solutions of cloud deployments by helping drive thought leadership in cloud security transformation.