Study cites cybercrime's rising costs to corporations

Companies can spend a fortune for global cybersecurity threats but if it's done poorly, it doesn't help a business. Security is a trade-off between risk and cost, and companies may spend more or less depending on their situation. Therefore if spending is higher or lower a company should not necessarily worry because what matters is why the spend is at a certain level and whether it is good or bad.

70% of US companies in China were hit by state-backed hackers last year. How can you win?

I would say that $15.4 million per large US company is gross underestimate.. Considering the poor state of IT security in all large companies, I would say that 90% of all attacks go undetected, depending on method of attack. Furthermore, there are incalculable losses associated with loss of things like source code, employee information, CRM and leads systems, HR systems, etc.