I'm writing a security budget calculator to go with a blog post. Anyone want to volunteer major buckets that should be considered and offer thoughts on how to calculate them? :)