Investing in Cybersecurity: Making the Case