A Framework for Programming and Budgeting for Cybersecurity