The Behavioral Economics of Why Executives Underinvest in Cybersecurity

The digital threat landscape changes constantly, and it’s very difficult to know the probability of any given attack succeeding — or how big the potential losses might be. Even the known costs, such as penalties for data breaches in highly regulated industries like health care, are a small piece of the ROI calculation. In the absence of good data, decision makers must use something less than perfect to weigh the options: their judgment.

Source: The Behavioral Economics of Why Executives Underinvest in Cybersecurity