These figures don’t include things like expenditures such as payments to 3rd parties—for instance, law, general public-relations, and negotiation corporations. Nor do they include the opportunity prices of having executives and specialised teams convert faraway from their working day-to-day roles for weeks or months to manage an attack or with