ISO 31000 is the perfect umbrella to fit all kinds of Risk Management Solutions / measures. Specifically for Criminal Risks, and thus for Security Solutions, we developed a Method and Software to measure the effectiveness of Security Solutions and to prove the Return On Security Investment (ROSI).