Cybersecurity is expensive and doesn't contribute directly to profits. It can prevent serious damages (legal, financial, and reputation) but that requires long-term thinking. Most executives don't look past quarterly earnings.