RAND researchers developed and supported the implementation of a methodology to assess the value of resource options for U.S. Navy cybersecurity investments. The proposed methodology enables the Navy to rationalize the cost-effectiveness of potential cybersecurity investments without having to monetize potential losses from cybersecurity attacks or consider the probability of such events amid all possible adversaries and attack paths.