Proper Security is more expensive than paying after security incident happen ?
extract : "[...] On the other hand, as we examine the actual costs of these events
in our dataset (clearly one of the most important outcome meas-
ures), we find that they cost most firms less than $200k, only a frac-
tion of the millions of dollars commonly cited. We also estimate that
they represent only 0.4% of firm revenues, far less than other losses
due to fraud, theft, corruption, or bad debt (Clearly, however, in
some cases, data breaches and other cyberattacks have caused mas-
sive losses to firms, as well as some cases of identity theft do cause
extreme harms to individuals. Note, however, that these discussions
relate to average or median outcomes.).