Is Everlasting Security Necessary?

Security professionals are now part of the risk analysis and business team. Businesses and organizations must protect the valuable information they use in conducting their core functions. Loss or compromise of that information can damage the organization up to and including bankruptcy. A survey and projections report by a cybersecurity firm estimated that $\mathbf{7 5 \%}$ of companies based in the US are prone to cyber-attacks. Also, the revenue loss by vulnerable companies due to cyber-attacks may exceed 452 billion dollars in 2024. Most businesspeople are not well versed in cybersecurity and protecting information, but they understand profits, loss, return on investment, loss prevention, and the math behind them. Often, security is seen as a loss center, making it difficult for security personnel to justify taking measures to safeguard information or informationcarrying equipment and networks. Encryption is one example of such vital but ethereal costs. Convincing the business side of operations to implement security requires speaking their language. This paper suggests a way to present encryption in a provably cost-effective manner related to return on investment. Simultaneously, an outline of a strategically adaptive approach to security is introduced.