A new report from the Center for Strategic and International Studies (CSIS) estimates that cybercrime costs businesses some $400 billion a year worldwide.