Return on Investment (ROI)

For project justification, ROI estimates the profit a project is expected to generate. Compute it by taking expected revenue minus expected costs to get the net gain, then divide that net gain by the expected costs to express the return as a rate.

Key Points

  • ROI measures expected profitability to help justify or compare projects.
  • Formula: ROI = (Expected revenue - Expected cost) / Expected cost.
  • Expressed as a percentage; higher ROI is generally preferred when scope and time horizon are comparable.
  • Limits: does not reflect timing of cash flows, risk, or scale; consider with NPV/IRR for a fuller view.

Example

A project is expected to earn 1,500,000 USD in revenue with 1,200,000 USD in costs. Net benefit = 300,000 USD; ROI = 300,000 / 1,200,000 = 0.25, or 25%.

PMP Example Question

During project selection, a sponsor compares two proposals. Project Alpha expects 900,000 USD in revenue and 600,000 USD in costs. Project Beta expects 1,200,000 USD in revenue and 950,000 USD in costs. Based on ROI, which project should be selected?

  1. Project Alpha, ROI = 50%
  2. Project Beta, ROI ≈ 26%
  3. They are equal; ROI = 33%
  4. Neither; ROI cannot be used before execution

Correct Answer: A — Project Alpha

Explanation: Alpha ROI = (900,000 - 600,000) / 600,000 = 0.50 (50%). Beta ROI = (1,200,000 - 950,000) / 950,000 ≈ 0.263 (26%). Choose the higher ROI.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Run the drill before the incident runs you

Design, run and prove OT drills and tabletop exercises before an incident tests your team. OT Incident Drills and Exercises includes 24 lessons and practical exercise materials, delivered through HKSM Courses for US$47 one-time. 30-day money-back guarantee when 50% or less of the course has been consumed.

Explore the Course