No week passes without the news of a new cybersecurity incident or data breach at a major company and the most severe incidents result in millions of dollars in losses for the impacted companies. On the other hand, large financial institutions spend millions of dollars on both projects and run-the-bank activities to protect themselves from cybersecurity risks. Therefore, are firms investing enough to protect themselves and their customers? Or are they spending too much on Cybersecurity?