KS ISO/IEC/TR 27016

Information technology - Security techniques - Information security management - Organizational economics.

Provides guidelines on how an organization can make decisions to protect information and understand the economic consequences of these decisions in the context of competing requirements for resources.