Development effort (hours x developer rate) - Infrastructure changes (hardware, software licenses, configuration time) - Downtime during implementation (business impact) - Testing and validation after remediation - External consultant fees (if specialized expertise is needed)