Of course, I'm not saying that you don't need to handle all those things -- you do. You have to have insurance, and anti-fraud departments, etc.

But compared to the costs associated with insurance or damage control, having a small team of security minded people that can make changes is basically free.