Beyond the breach: Risk vs Investment