Everyone has a price, and so too does the cost of securing data. However, the question we must ask ourselves is does the value derived from the project exceed the cost of the project? While this may seem like economics 101, why do we ignore this so often in the security industry?