Considering technical and financial impact in the selection of security countermeasures against Advanced Persistent Threats (APTs).