Even for non-victims, there’s a financial hit in implementing security measures to prevent losses. Firewalls cost money, and so do the salaries of the security professionals who manage them. Yet, relatively little attention has been paid to the economics of information security.