Increased risk and more data-driven decisions means security investment has to be a greater priority.