If large corporations had to carry insurance which paid out in the event of a security breach exposing users’ data, they might take it more seriously.  It converts the small annual risk of such a breach, which managers can gamble on, into a measurable monthly or annual cost which can be lowered through preventative measures.