Information security: the dilemma of the effectiveness of investments when the expected result is that nothing happens. - Rafael De Queiroz Batista; Eduardo de Rezende Francisco (Inf. Comput. Secur., 2025)