In light of the ongoing budget approval hurdles, where justifying expenditures is pivotal, our RoP model is poised to facilitate IT and IT security practitioners in presenting compelling business cases for obtaining crucial security technologies and related control activities.