Watch this video on YouTube
What would be the most relevant information to include in a cost-benefit analysis of a two-factor authentication system?