https://5dok.info/document/qo5gd710-quantitative-economic-analyses-information-security-investment-enterprise-information.html