IT SECURITY INVESTMENTS THROUGH THE LENS OF THE