IT security is often treated as insurance -- something you have to spend on but which doesn't deliver any actual value. Forrester analyst Michael Barnes reminds us that in an era where breaches are increasingly common, strong security and governance can actually be a means of attracting customers.