If a more expensive solution provides the same value as a competitor at a lower price, its ROI is lower. It doesn't deliver the same value for the price point.

The ability to detect and respond to an event within 60 seconds is priceless to us because a detected for each event becomes escalation, and objectives on target add about 60 seconds or more. Having ArcSight provide us these alerts within 15 to 30 seconds of something actively happening, where our analysts can then begin to engage, isolate, and mitigate, that's priceless.

We have seen ROI because this space keeps on changing very dynamically. It depends on your customer. There is definitely a return on investment, but it's not large because these types of solutions are for compliance purposes. We see many cyber attacks happen nowadays, but they definitely prevent some of the major incidents. It will give direct results to an organization, maybe in some intangible manner. But because this is a compliance thing, you definitely have to implement at least one SIEM in the infrastructure.

Thanks to Micro Focus's licensing model, as an MSSP, we are able to see a complete return on our investment almost immediately.

I'm unsure on the exact ROI for ArcSight Enterprise Security Manager (ESM) because in cybersecurity you could never predict how much you saved, but my company got good value out of it.

We have witnessed an ROI so far.

ROI can be measured in terms of detected security incidents and compliance positive tests, which in turn boost the business. Our security incident count increased from 3 per month to 46 and all were real security threats. Had those gone undetected and realized, there would have been possible data theft, information stealing, damage of brand reputation, etc.

Poor as the product takes more effort to generate value. Its CAPEX cost is high too.

The ROI was not important at first because we were trying to cover our basic compliance requirement for monitoring.

I have not been involved in the ROI calculations and considerations, thus I cannot give my thoughts on this point.

Calculating ROI is tricky and was never a concern for us. The simple fact that HPE ArcSight helped us several times to survive malware attacks (Conficker was one such attack) and it also helped a lot with different compliance audits, which was enough for us.