cyber security policy cost