The vast increase in digital in insecurity - posed by ransomware, DDoS attacks and data breaches amongst others - requires an intelligent cyber security strategy. Government and industry can shape this strategy with legal instruments, such as regulations and contracts. However, very little is known regarding the social costs and benefits thereof. This is worrisome: cyber security expenditures will rise exponentially in the future as mankind becomes increasingly dependent on the digital world....