Likelihood of threat |Return on investment |Total cost