Frank,

The primary concerns are:

What level of security must be attained? What are the possible losses/damages to be incurred?

What are the internal consequences? How much internal disruption/people cost will be incurred. Or, cross-wise, what will be the internal benefits?

Costs of install, maintenance.

Hope this helps.

Source: http://www.abusinessmentor.com