Buying insurance instead of adopting better security measures is not a helpful attitude either. Nany companies don't invest in better security measures because

Buying insurance instead of adopting better security measures is not a helpful attitude either. Nany companies don't invest in better security measures because it's expensive to do so for decades worth of legacy systems and they'd rather take a small risk and get insured for it.