What is the best value that should be assessed when evaluating the worth of an information asset to the organization - replacement cost or lost income while repairing or replacing? What is the likelihood value of a vulnerability that no longer requires consideration? Cite resources and references that can support your assertions