Re: Benefit math? (Score 2)

I like your logic. But in this situation, thinking of the cost of a cyber attack only in terms of expected value isn't appropriate for many businesses. This isn't a series of repeatable events. Better to think about prevention somewhat like the cost of catastrophic insurance (or at least the variety not required by law). If one can survive the catastrophe, fine. But if not, then strongly consider the insurance.