Securing organizations’ critical IT investment from cyber breaches