The problem with "how much" is this: as the dollar amount of loss increases, the distance between "the owners of the money" and "the people responsible for keeping it safe" also increases. I make sure I know where my wallet is, but Jeff in IT won't lose billions (or a clueless CIO, for that matter).