Data breach is the biggest risk: 50% of the expected loss. Expected loss is €1.6M a year in total. 16% of years pass your once-in-20-years limit (€3M); you accept 5%.

3 of 3 options pay for themselves on their own. Net value is the loss each avoids, minus its cost, plus any other value.

Today, losses over 3 years are over your tolerance from €1.6M up; with the plan they stay within it, for an expected cost of €555k.