Regulations, breach concerns will push spending to over $3 billion by 2021, analyst firm says.