The PRIMARY purpose of asset valuation for the management of information security is to: