ROI re-visited

Many of the organization's we talk to regarding security awareness training tell us that they are in the process of or thinking about creating an in-house elearning solution. This always amazes me. Why in the world would you create something from scratch? Unless, of course, you have a bunch of learning and security professionals hanging around your company doing nothing with their time.

So, when does it make sense to develop internally? My answer (albeit not an expert opinion) is only when the subject matter is so highly specialized that nothing exists that adequately addresses the need. In the case of security awareness there is an incredible amount of developed content already available that can be customized to suit an organization's requirements.  It may not be ours, but the point is, you will be saving money in the long run. For us, one‐hour elearning with animation, audio, and translation into two languages, has an approximate associated timeline of 18 weeks. What is your estimate?