DHS is working with teams at the University of California, San Diego, and University of Illinois, Chicago to help build tools and research the best approach for cyber security defense. This effort comes from a program called Cyber Risk Economics, an effort by the DHS to help people invest in cyber security defenses that will have the biggest bang for the buck. If they understand the best approach to cyber defense, then they can make smarter investment decisions for cyber security.
https://www.defenseone.com/technology/2018/11/dhs-funded-tech-could-help-calculate-costs-cyberattacks/152729/
This seems like a sound investment for the DHS. I really like the focus of the study with is to create threat intelligence metrics to help organizations evaluate investments in threat intelligence. It also has one of those necessary cool acronyms. CYRIE. With this info attempting to be created organizations should be able to weigh the costs against potential savings for different cybersecurity tools.