You have something called ALE: average loss expectancy. You multiply the probability of an event happening with the amount of damage you'll incur, and that'll tell you how much to spend on security. When you deal with events that have a very, very high damage [amount], and a very, very low probability of occurrence, you multiply infinity by zero and get whatever you want.
|