Integrating cost–benefit analysis into the NIST Cybersecurity Framework via the Gordon–Loeb Model

nist, computer security, computer science, risk analysis (engineering), incentive, information systems security, risk management, engineering management