The real cost of not investing in Cyber Security