Spending plans come amid rising concerns over third-party cyber risk.