Prioritizing security investments: A risk-cost framework for the efficient allocation of security controls
How IT leadership and security officers prioritize security investments: A practical risk-cost framework (SLE/ARO/ALE), sensitivity analysis, g…