Return On Security Investment (ROSI) A Practical Quantitative Model In Proceedings of the 3rd International Workshop on Security in Information Systems - Volume 0ICEIS, 239-252, 2005 , Miami, United States