There are lots of calls to invest in improving cybersecurity. But it struck me that it doesn’t work like that. Not getting hacked is not so much a question of buying the right stuff. It is a question of doing the right things and understanding what you are doing. It is easy to demand that people ‘invest’ in something. You can even supply them with the money to do so.
