What happens when supply chain security is working?

This may sound like a little supply chain humor (which by the way is always welcome on this blog), but the punchline is "nothing." Nothing should happen when supply chain security is working, that is why it's so difficult to find an IT budget and why its so difficult to determine the ROI. Plenty of best practices have been developed for determining the ROI for a CRM or ERP implementation. The before and after are easy to compare and contrast. But with security unless something disastrous happens you'll never know. If anyone has had any success in securing a supply chain security IT budget please post your strategy here.