Making upfront, definitively costly investments in order to avoid potential negative future consequences, is a hard one to justify. Especially when the future

Making upfront, definitively costly investments in order to avoid potential negative future consequences, is a hard one to justify. Especially when the future consequences barely exist. It's very rare for a breach to have serious impact on a company, relative to other areas the company could invest.