NIST proposes model to assess cybersecurity investment strategies in network security | ZDNet
Four algorithms assess network probabilities of being breached, the likely rates of spread, how long — and how much it would cost — to repair the damage, and the expense associated with full recovery.