Evaluating the Cost-Benefit Dynamics of Cybersecurity Compliance Investments: A Multi-Sectoral Analysis Across Financial, Educational, and Ecommerce Industries

Abstract

Following the assertion of recent studies (Balogun, 2025) establishing the foundational role of compliance investments in mitigating data privacy breaches within U.S. healthcare; while the study is limited to the cost-benefit dynamics of such investments across other critical industries, this study investigates cybersecurity compliance investments and outcomes across financial, educational, and e-commerce sectors using quantitative methods. Data were drawn from the SEC EDGAR database, IBM Cost of a Data Breach Report, and the Privacy Rights Clearinghouse. Descriptive statistics, multivariate regression, costbenefit analysis, logistic regression, and k-means clustering were employed to assess expenditure patterns, outcome efficiency, and compliance maturity. Results reveal that while the financial sector had the highest average investment ($850M), its cost-benefit ratio (CBR = 0.00547) lagged behind the education sector (CBR = 0.02016), which achieved the highest efficiency despite minimal investment. Zero-trust adoption (β =-1.81) and MFA (β =-1.60) emerged as the strongest predictors of breach resilience. The study recommends regulatory transparency on cybersecurity ROI, targeted support for low-capacity institutions, a shift to resilience-based auditing, and mandatory architectural safeguards for e-commerce platforms to optimize compliance effectiveness across sectors.

Keywords: Cybersecurity Compliance, Cost-Benefit Ratio, Breach Prediction, Sectoral Investment Efficiency, Regulatory Strategy