The following is a link to an excellent paper developed by a task force discussing financial management of cyber risk. The paper is on the American National Standards Institute website--it is free to obtain a copy, but you do have to provide some registration information first,
The Financial Management of Cyber Risk
Regards,
Dave Tate, Esq.
http://davidtate.us