Pragmatic Security: Balancing Investment and Protection