Are Cybersecurity Investments Worth It?