Protecting confidential information is a business requirement and in many cases also an ethical and legal requirement. Therefore, one of the main concerns of organizations today is identifying the optimal investment in information security. The famous Gordon-Loeb model actually provides a powerful mathematical economic approach to address this critical concern. In our study we use Sony Corporation as an example. Sony Corporation is a Japanese multinational corporation headquartered in Tokyo, Japan. Its diversified business includes consumer and professional electronics, gaming, entertainment and financial services. The company is a leading manufacturer of electronic products for the consumer and professional markets. Sony is ranked 116th on Fortune Global's 2015 list