Answer the following e-Commerce question.

One security expert states that a "poverty gap has emerged between companies who are more mature and those who are not." What does this statement mean relative to eCommerce security? Why do so many companies build a strong security infrastructure only after there has been a breach? How does this relate to the risk management model on page 4 of our lecture notes on security?