What is the decision$-$making process called if an organization should not spend more to protect an asset than ir's worth?

a$.$ cost$-$benefit avoidance $($CBA$)$

b$.$ cost$-$benefit risk treatment $($CRT$)$

C$.$ cost$-$benefit calculation $($CBC$)$

d$.$ cost$-$benefit analysis $($CBA$)$