In a column for Talk Business & Politics, Sullivan Wright Technologies co-founder and partner Chris Wright explores the tension between cost-cutting instincts and the need for strong cybersecurity, arguing that protecting data is one area where short-term savings can lead to long-term losses. While saving money provides financial benefits and psychological rewards, Chris cautions that allowing cost reduction to dominate cybersecurity decisions can be misguided.

Chris explains that business leaders often take pride in running lean operations by trimming expenses and optimizing budgets. However, companies should not view cybersecurity through the same bargain-hunting lens. Instead, the focus should be on maximizing return on investment, not minimizing spend. This is especially relevant as two trends converge: rising concern over cyber threats and decreasing federal oversight.

According to the Allianz Risk Barometer, cyber incidents have ranked as the top global business risk for four consecutive years, highlighting growing anxiety around data breaches and ransomware. At the same time, government agencies are scaling back cybersecurity programs and oversight, including planned cuts at the Cybersecurity and Infrastructure Security Agency (CISA). Chris argues that cutting programs simply because requirements are relaxed is short-sighted and that operational resilience should remain a strategic priority. He encourages organizations to build tailored, risk-based cybersecurity programs.

At the same time, Chris stresses that this approach does not require buying every new security tool. Strategic, expert-guided investments can still deliver stronger protection without wasteful spending. Savings are appealing, but the financial and reputational damage from a breach far outweighs short-term cost reductions. Accordingly, it’s essential to prioritize long-term cyber resiliency over immediate savings.