Forbes: Determining the return on investment from cybersecurity begins with a simple idea: Spending a little today can save a lot tomorrow. Through the enactment of actual attacks during penetration testing and red team exercises, organizations find valuable insight on their defenses.