Value Measurement for Skeptical CFOs
Why we report ranges instead of ROI, how we calculate them conservatively, and why your finance team will actually trust the numbers.
What are Value Bands?
Value Bands are conservative ranges that quantify the business impact of governance decisions. Unlike ROI calculations, Value Bands don't claim causation—they document outcomes with explicit uncertainty.
ROI: 'ΔOS saved you $4.2M this quarter'
Value Band: '$2.1M–$4.2M value accrued (High confidence)'
Ranges communicate uncertainty honestly. The lower bound is defensible; the upper bound is historically plausible.
ROI: Projected future savings
Value Band: Backward-looking only
We don't forecast. Value Bands summarize what happened, not what might happen.
ROI: 'Our tool generated this value'
Value Band: 'Governance decisions contributed to this outcome'
Attribution is hard. We document the contribution without claiming sole credit.
Why ranges instead of single numbers?
Single numbers imply false precision. When we say 'blocked deployment saved $150,000,' we're pretending we know exactly what would have happened. We don't. Ranges communicate what we actually know.
Lower bound
Conservative minimum based on most pessimistic defensible assumptions. If the CFO challenges you, this number holds up.
Upper bound
Historically plausible maximum based on comparable outcomes. Realistic but not guaranteed.
Confidence level
How complete is the evidence? High confidence means verified outcomes. Low confidence means significant assumptions were required.
Example calculation
Blocked production deployment with known CVE
Lower bound
Upper bound
Confidence
Lower bound: median remediation cost for CVE severity. Upper bound: P90 incident cost from industry data. Confidence: High because outcome (blocked) is verified and vulnerability severity is documented.
Common CFO objections (and our answers)
"These numbers aren't auditable"
Every Value Band links to underlying governance decisions. Click any number to see: the original intent, the policy that applied, the judgment rendered, and the outcome recorded. Auditors can replay any decision.
"How do I know the methodology is sound?"
Our methodology is fully documented and consistent. Every calculation uses the same approach: identify benchmark, apply conservative downgrade, compute range, assign confidence. No special cases. No adjustments for better optics.
"You're double-counting or inflating"
Each decision is assigned to exactly one value category. We apply conservative downgrades systematically—typically 30-50% below industry benchmarks. We'd rather understate than overstate.
"I can't defend these to the board"
Executive reports separate high-confidence values from lower-confidence estimates. Board presentations use only verified outcomes with complete evidence trails. Every claim can be traced to a specific governance decision.
"What about values that didn't materialize?"
Value Bands only count verified outcomes. If we blocked a risky deployment and the risk never materialized, we don't retroactively remove the value. But we also don't project future savings based on past blocks.
"Your ranges are too wide to be useful"
Wide ranges reflect genuine uncertainty. As evidence accumulates and outcomes are verified, ranges narrow automatically. A wide range with high confidence is more useful than a narrow range based on assumptions.
The five value categories
Every governance decision maps to exactly one category. No double-counting.
Risk Avoided
Quantified risk that did not materialize because governance blocked or modified an action
Incident Prevented
Incidents that governance decisions prevented, based on historical incident patterns
Time Saved
Manual review time eliminated through automated governance decisions
Compliance Assurance
Compliance requirements satisfied through governance, avoiding findings or remediation
Velocity Gained
Throughput increase from automated governance enabling faster deployments
What you'll see in reports
Value Accrued — Q2 2026
Decisions governed
Automation rate
* High-confidence values only. Medium/low confidence excluded from summary.
* Methodology: Conservative downgrade applied to industry benchmarks.
* All values link to underlying governance decisions for audit.
Common questions
Yes. You can configure organization-specific benchmarks for value calculations. Custom benchmarks are documented and versioned alongside the standard methodology.
Value Bands update as outcomes are reconciled. Initial values use benchmark estimates; final values reflect verified outcomes. Typical reconciliation window is 30-90 days depending on outcome type.
Every Value Band can be adjusted with documented rationale. Adjustments are tracked in the audit trail and appear in methodology statements.
Yes. Time-based value (like time saved) decays according to documented rules. Risk-based value has different decay patterns. All decay rules are documented and configurable.
See Value Bands in your environment
Walk through how ΔOS would calculate value bands for your governance decisions.