Does cyber security have to be a costly corporate stumbling block, or can it actually add value and be a strategic advantage?