Do Companies Compromise With Their Cyber-Security?