Cyber crime costs are accelerating. With organizations spending nearly 23 percent more than last year—US$11.7 million, on average—they are investing on an unprecedented scale. Yet, whether managing incidents or the disruption from them, current spend priorities show that much of this is misdirected toward security capabilities that fail to deliver the best efficiency and effectiveness.