Another way to think about the business case for investment in Cyber Security