The Cost and Value of Cyber Security