Security Budgeting by Risk‑Reduction ROI

Note: Provide a lightweight model for expected loss, control efficacy, and prioritization tradeoffs with examples.