Hiring a cybersecurity firm: Is it worth it?