Perhaps they consider that the employees will be way more productive without all the security barriers that the Infosec team would set up, so paying for the bre

Perhaps they consider that the employees will be way more productive without all the security barriers that the Infosec team would set up, so paying for the breach is a net gain in this light.