Text this: Application of the Gordon Loeb model to security investment metrics: a proposal