Should government invest more money in preventing cyber-attacks?