Building owners don't install sprinkler systems out of affection for their tenants, but because building codes and insurance policies demand it. Deciding what kind of theft and fire prevention equipment to install are risk management decisions, and the risk taker of last resort is the insurance industry. This is sometimes hard for computer techies to understand, because the security industry has trained them to expect technology to solve their problems. I think the current wisdom is that all you need is biometrics, or maybe smart cards. The real world doesn't work this way.
Businesses achieve security through insurance.
They take the risks they're not willing to accept themselves, bundle them up, and pay someone else to worry about them. If a warehouse is insured properly, the owner really doesn't care if it burns down or not. If he does care, he's underinsured. Similarly, if a network is insured properly, the owner won't care whether it's hacked or not. Get bandwidth interruption insurance.