Failing to protect corporate data opens the corporate purse with no guarantee that it will ever be closed again.