Question 2 "Because many firms have not immediately seen the expected financial loss due to security breaches or the expected gain from their information security investments, they have sometimes hesitated to make security investment decisions" (Jeong, Lee, \& Lim, 2018). Critically discuss the above statement. Your discussion must address the issues in the statement, and demonstrates ways to reduce the risk of security breaches. Provide examples or cases to support your arguments