At what point should you start investing money in cyber security?