I guess the core questions are "How much did you enjoy Heartbleed and Shellshock?" and "How much are you willing to pay to prevent those from happening again?"

It was basically what happened to G+ and FB over the last few months, but to every website. Preventing that is probably worth pitching a few percent of your annual capital budget to infrastructure projects.