What are the primary reasons for the development of a business case for a security project?

To forecast usage and cost per software licensing

To understand the attack vectors and attack sources

To communicate risk and forecast resource needs

To estimate risk and negate liability to the company