The risk management goal

The requirement is that businesses make this sum as small as possible:

the cost of the defensive measures
+
all the expected losses with those defensive measures.

It is convenient to give this requirement a name. Call it the risk management goal.

If a business fails to meet this goal it most likely either spends too much or too little money on defense.

Yes

No