Optimal Spending on Cybersecurity Measures (Protecting Health Information)