Rational Cybersecurity for Business