The Cost of Cybersecurity: Prevention vs. Damage Control