An article exploring the optimal amount of money to invest to protect information. This model looks at the extent to which a piece of information is vulnerable and the potential loss that would occur if it was breached, and notes that companies should spend a small fraction of the expected loss due to a security breach in order to protect the information.