While one annual industry report puts the cost of the average cyber-incident at $1 million, an analysis of insurance data puts damages much lower—at about $200,000. Companies that spend little on security workers and technologies may not be acting irresponsibly, but making rational choices, because the cost of the average cyber-security incident is...