models, IA models, and multiple-objective decision analysis. Each model
yields mathematical outputs capturing figures such as estimated losses
from attacks, predicted attack frequency, and effectiveness of
countermeasures. Those quantitative outputs inform investment