CIS Controls: Use Cases and Cost-Justification