When a company’s computers are hacked, management’s first impulses often are to invest in better software, better virus protection packages, better computers, or even entire