Security costs are often neglected as it is like buying insurance. Until a breach happens you don’t really value it. But if your entire business wipes out then maybe it is worth investing in it.