XYZ University is a well-known institution of higher learning in the Ghana with a large student body and numerous administrative staff and faculty members. However, the institution's cybersecurity infrastructure had not been updated in over five years, making it vulnerable to cybersecurity threats such as malware infections and cyber-attacks. Despite numerous requests from previous Information Security Director, the management delayed upgrading citing budget constraints. In March 2022, a day after you joined the university as it new Information Security Director, the university experienced a major data breach where hackers infiltrated and stole sensitive information, leading to a decline in student enrollment and loss of research funding, among other damages. To prevent future data breaches, the university should prioritize upgrading its cybersecurity infrastructure, allocate sufficient funds and resources, provide regular cybersecurity training, and conduct security audits. Upgrading cybersecurity measures is crucial to ensure the safety of staff, faculty, and students and safeguard the institution's finances and reputation from future cybersecurity threats. Advise the company as the Information Security Director using the concept of IT investment decisions and factoring in potential losses to the institution. Present recommendations in business language and assume all measures necessary for a secure cyber environment. XYZ University is a well-known institution of higher learning in the Ghana with a large student body and numerous administrative staff and faculty members. However, the institution's cybersecurity infrastructure had not been updated in over five years, making it vulnerable to cybersecurity threats such as malware infections and cyber-attacks. Despite numerous requests from previous Information Security Director, the management delayed upgrading citing budget constraints. In March 2022, a day after you joined the university as it new Information Security Director, the university experienced a major data breach where hackers infiltrated and stole sensitive information, leading to a decline in student enrollment and loss of research funding, among other damages. To prevent future data breaches, the university should prioritize upgrading its cybersecurity infrastructure, allocate sufficient funds and resources, provide regular cybersecurity training, and conduct security audits. Upgrading cybersecurity measures is crucial to ensure the safety of staff, faculty, and students and safeguard the institution's finances and reputation from future cybersecurity threats. Advise the company as the Information Security Director using the concept of IT investment decisions and factoring in potential losses to the institution. Present recommendations in business language and assume all measures necessary for a secure cyber environment..