Cybersecurity has become an essential part of the corporate security landscape. With the evolving business transformation in the recent past, business is now highly becoming dependent on Information and digital data. Incidentally, the security threat and the cyberattack practice/mechanism are evolving into much more sophisticated and coordinated. Evidently, Cybersecurity has transcended into new business reality and more importantly has become a business imperative. But security is itself a vague concept, especially cybersecurity is mostly dealt with a reactive approach rather than a proactive approach. One of the serious quandaries which every organisation faces with cybersecurity is INVESTMENT AND CYBER STRATEGY.