Accepting that there’s a problem, as the saying goes, is the first step.

As companies come to terms with cybersecurity risks, they’re faced with questions of how to address them—and how much it’s all going to cost.