Quantify the cost of your security effort versus the cost of recovery from damage. Do the following to help determine worthwhile security policy: