Cost Estimation of Information Technology Risks and Instituting Appropriate Controls

The background behind the development of the data-driven approach is to arrive at a standardized methodology for an enterprise that strikes a correct balance between the cost and value elements of managing its IT risks, eliminating any disproportionate expenditure on controls.