Researchers at the Robert H. Smith Business School at the University of Maryland developed and refined an economics-based model to help businesses with this exact problem. The researchers produced an informative video to show the basics of the research into a four-step process to help you determine where your security budget is best spent. Its not always best to set out to protect your most obvious assets. Sometimes the costs of protecting the most vulnerable assets are impractically high. From a business return standpoint, you may be better off protecting a larger number of less vulnerable assets.”]
Source: https://securityintelligence.com/get-the-security-budget-you-need-and-spend-it-wisely/