Cost or Benefit? — TechKnowSurge

About this interactive

Time and resources are limited, so every yes is a no to something else. A trade-off analysis weighs those choices; a pros and cons table is the simple version, but its entries are hard to compare. A cost-benefit analysis is the trade-off analysis done in money, so very different projects can be compared on common ground. The lesson's example: before a busy season, a software as a service company must choose between stabilizing its servers and shipping a feature customers want. Costs are what you put in: the cost to deploy the change, staff time, equipment and licensing, and any overrun. Choosing one project also costs you what the other one would have delivered, because you are not doing it. Benefits are what you get back. For a risk fix, that is the drop in risk: a lower expected loss from outages, fewer customers lost to crashes. For a revenue project, it is the new revenue. Return on investment turns the two sides into one number: the benefit, less the cost, divided by the cost. That is the next lesson. The lesson's story ends with a warning: the company picked the feature, the servers failed under the busy-season load, and everything else had to stop while they were fixed.

What you'll learn

Place each item of a cost-benefit analysis on the cost side or the benefit side, for both a risk fix and a revenue project
Recognize the trade-off in choosing one project: what the other project would have delivered is a cost of the choice

Aligned to

NIST NICE

S0850 Skill in performing cost/benefit analysis

S0891 Skill in performing trade-off analysis

CompTIA Security+

5.2 Explain elements of the risk management process.

Key terms

Cost-Benefit Analysis: A financial evaluation method that compares the costs of implementing a solution against the benefits it produces to support decision-making.
Tradeoff Analysis: The process of evaluating competing options by weighing their respective costs, benefits, and consequences to determine the best allocation of limited resources.
Return on Investment: A measure of the financial return gained from an investment, calculated by dividing the net benefit by the cost of the investment, expressed as a percentage.
Residual Risk: The level of risk that remains after security controls have been applied to reduce inherent risk. No control eliminates risk entirely; residual risk must be formally accepted by management or addressed with additional mitigations.

Topics

Risk Management Risk Analysis Interactive Streak Sort

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →