Open-Source Intelligence for Risk Assessment Net Present Value (NPV) / MBA Resources

Introduction to Net Present Value (NPV) - What is Net Present Value (NPV) ? How it impacts financial decisions regarding project management?

NPV solution for Open-Source Intelligence for Risk Assessment case study

At Oak Spring University, we provide corporate level professional Net Present Value (NPV) case study solution. Open-Source Intelligence for Risk Assessment case study is a Harvard Business School (HBR) case study written by Darren H. Hayes, Francesco Cappa. The Open-Source Intelligence for Risk Assessment (referred as “Osint Cyberattacks” from here on) case study provides evaluation & decision scenario in field of Strategy & Execution. It also touches upon business topics such as - Value proposition, IT, Security & privacy, Strategy.

The net present value (NPV) of an investment proposal is the present value of the proposal’s net cash flows less the proposal’s initial cash outflow. If a project’s NPV is greater than or equal to zero, the project should be accepted.

NPV = Present Value of Future Cash Flows LESS Project’s Initial Investment

---

Case Description of Open-Source Intelligence for Risk Assessment Case Study

Advances in information technology (IT) have prompted tremendous growth in security issues for companies. Increasingly, cyberattacks represent a threat to companies and national security; to prevent them, firms should routinely perform risk assessments of their IT infrastructure and employees. This article highlights the importance of open-source intelligence (OSINT) tools in conducting risk assessments to prevent cyberattacks. More specifically, we performed a vulnerability assessment on the critical infrastructure of a company operating on the U.S. electrical grid. We successfully profile the company's network software, hardware, and key IT personnel-using OSINT-and detailed potential vulnerabilities associated with these findings. The results of our study provide empirical evidence for the efficacy of OSINT in improving the security posture of organizations. Our research findings were subsequently used to produce tactical and strategic recommendations for organizations based on the use of OSINT to identify vulnerabilities, mitigate risks, and formulate more robust security policies to prevent cyberattacks.

Case Authors : Darren H. Hayes, Francesco Cappa

Topic : Strategy & Execution

Related Areas : IT, Security & privacy, Strategy

---

Calculating Net Present Value (NPV) at 6% for Open-Source Intelligence for Risk Assessment Case Study

Years	Cash Flow	Net Cash Flow	Cumulative     Cash Flow	Discount Rate @ 6 %	Discounted Cash Flows
Year 0	(10007217)	-10007217	-	-
Year 1	3450405	-6556812	3450405	0.9434	3255099
Year 2	3982250	-2574562	7432655	0.89	3544188
Year 3	3966947	1392385	11399602	0.8396	3330725
Year 4	3240072	4632457	14639674	0.7921	2566440
TOTAL			14639674		12696453

The Net Present Value at 6% discount rate is 2689236

In isolation the NPV number doesn't mean much but put in right context then it is one of the best method to evaluate project returns. In this article we will cover -

Different methods of capital budgeting

What is NPV & Formula of NPV,
How it is calculated,
How to use NPV number for project evaluation, and
Scenario Planning given risks and management priorities.

---

Capital Budgeting Approaches

Methods of Capital Budgeting

There are four types of capital budgeting techniques that are widely used in the corporate world –

1. Payback Period
2. Net Present Value
3. Internal Rate of Return
4. Profitability Index

Apart from the Payback period method which is an additive method, rest of the methods are based on Discounted Cash Flow technique. Even though cash flow can be calculated based on the nature of the project, for the simplicity of the article we are assuming that all the expected cash flows are realized at the end of the year.

Discounted Cash Flow approaches provide a more objective basis for evaluating and selecting investment projects. They take into consideration both –

1. Magnitude of both incoming and outgoing cash flows – Projects can be capital intensive, time intensive, or both. Osint Cyberattacks shareholders have preference for diversified projects investment rather than prospective high income from a single capital intensive project.
2. Timing of the expected cash flows – stockholders of Osint Cyberattacks have higher preference for cash returns over 4-5 years rather than 10-15 years given the nature of the volatility in the industry.

---

Formula and Steps to Calculate Net Present Value (NPV) of Open-Source Intelligence for Risk Assessment

NPV = Net Cash In Flowt1 / (1+r)t1 + Net Cash In Flowt2 / (1+r)t2 + … Net Cash In Flowtn / (1+r)tn
Less Net Cash Out Flowt0 / (1+r)t0

Where t = time period, in this case year 1, year 2 and so on.
r = discount rate or return that could be earned using other safe proposition such as fixed deposit or treasury bond rate. Net Cash In Flow – What the firm will get each year.
Net Cash Out Flow – What the firm needs to invest initially in the project.

Step 1 – Understand the nature of the project and calculate cash flow for each year.
Step 2 – Discount those cash flow based on the discount rate.
Step 3 – Add all the discounted cash flow.
Step 4 – Selection of the project

Why Strategy & Execution Managers need to know Financial Tools such as Net Present Value (NPV)?

In our daily workplace we often come across people and colleagues who are just focused on their core competency and targets they have to deliver. For example marketing managers at Osint Cyberattacks often design programs whose objective is to drive brand awareness and customer reach. But how that 30 point increase in brand awareness or 10 point increase in customer touch points will result into shareholders’ value is not specified.

To overcome such scenarios managers at Osint Cyberattacks needs to not only know the financial aspect of project management but also needs to have tools to integrate them into part of the project development and monitoring plan.

Calculating Net Present Value (NPV) at 15%

After working through various assumptions we reached a conclusion that risk is far higher than 6%. In a reasonably stable industry with weak competition - 15% discount rate can be a good benchmark.

Years	Cash Flow	Net Cash Flow	Cumulative     Cash Flow	Discount Rate @ 15 %	Discounted Cash Flows
Year 0	(10007217)	-10007217	-	-
Year 1	3450405	-6556812	3450405	0.8696	3000352
Year 2	3982250	-2574562	7432655	0.7561	3011153
Year 3	3966947	1392385	11399602	0.6575	2608332
Year 4	3240072	4632457	14639674	0.5718	1852522
TOTAL					10472359

The Net NPV after 4 years is 465142

(10472359 - 10007217 )

---

Calculating Net Present Value (NPV) at 20%

If the risk component is high in the industry then we should go for a higher hurdle rate / discount rate of 20%.

Years	Cash Flow	Net Cash Flow	Cumulative     Cash Flow	Discount Rate @ 20 %	Discounted Cash Flows
Year 0	(10007217)	-10007217	-	-
Year 1	3450405	-6556812	3450405	0.8333	2875338
Year 2	3982250	-2574562	7432655	0.6944	2765451
Year 3	3966947	1392385	11399602	0.5787	2295687
Year 4	3240072	4632457	14639674	0.4823	1562535
TOTAL					9499011

The Net NPV after 4 years is -508206

At 20% discount rate the NPV is negative (9499011 - 10007217 ) so ideally we can't select the project if macro and micro factors don't allow financial managers of Osint Cyberattacks to discount cash flow at lower discount rates such as 15%.

Acceptance Criteria of a Project based on NPV

Simplest Approach – If the investment project of Osint Cyberattacks has a NPV value higher than Zero then finance managers at Osint Cyberattacks can ACCEPT the project, otherwise they can reject the project. This means that project will deliver higher returns over the period of time than any alternate investment strategy.

In theory if the required rate of return or discount rate is chosen correctly by finance managers at Osint Cyberattacks, then the stock price of the Osint Cyberattacks should change by same amount of the NPV. In real world we know that share price also reflects various other factors that can be related to both macro and micro environment.

In the same vein – accepting the project with zero NPV should result in stagnant share price. Finance managers use discount rates as a measure of risk components in the project execution process.

Sensitivity Analysis

Project selection is often a far more complex decision than just choosing it based on the NPV number. Finance managers at Osint Cyberattacks should conduct a sensitivity analysis to better understand not only the inherent risk of the projects but also how those risks can be either factored in or mitigated during the project execution. Sensitivity analysis helps in –

What are the key aspects of the projects that need to be monitored, refined, and retuned for continuous delivery of projected cash flows.

What are the uncertainties surrounding the project Initial Cash Outlay (ICO’s). ICO’s often have several different components such as land, machinery, building, and other equipment.

What will be a multi year spillover effect of various taxation regulations.

What can impact the cash flow of the project.

Understanding of risks involved in the project.

Some of the assumptions while using the Discounted Cash Flow Methods –

Projects are assumed to be Mutually Exclusive – This is seldom the came in modern day giant organizations where projects are often inter-related and rejecting a project solely based on NPV can result in sunk cost from a related project.

Independent projects have independent cash flows – As explained in the marketing project – though the project may look independent but in reality it is not as the brand awareness project can be closely associated with the spending on sales promotions and product specific advertising.

---

Negotiation Strategy of Open-Source Intelligence for Risk Assessment

References & Further Readings

Darren H. Hayes, Francesco Cappa (2018), "Open-Source Intelligence for Risk Assessment Harvard Business Review Case Study. Published by HBR Publications.