Indian firms review security but hesitate at costs