Write an example of a cost analysis conducted within your organization, and how the cost of security controls implementation was justified?