An example. Everyone sees the same numbers. Make your own copy to change anything, or start from scratch.

Start from scratch

Another example: Business Disruption →

1 What risks are we worried about?
2

3 of 3 options pay for themselves on their own. Net value is the loss each avoids, minus its cost, plus any other value.

Cost against risk reductionover 3 years · bubble size: how uncertain · label: expected return (RoSI)
What each intervention changesintervention → part of a scenario → scenario · click one to edit it
Interventions3 of 3 included
Data Security Posture Management (DSPM)
Implementation cost€1,000 / €8,000 / €10,000
Operating cost / year€70,000 / €80,000 / €90,000
Effect confidencePretty sure
ChangesParameterTo
Insider data exfiltration Rate of occurrence 85%
Insider data exfiltration Primary cost — typical 90%
Insider data exfiltration Primary cost — severe 75%
Insider data exfiltration Secondary loss probability 85%
Insider data exfiltration Secondary cost — typical 75%
Insider data exfiltration Secondary cost — severe 50%
Insider data exfiltration Records — typical 70%
Insider data exfiltration Records — severe 50%
Data Loss Prevention (DLP)
Implementation cost€1,000 / €5,000 / €7,500
Operating cost / year€45,000 / €50,000 / €55,000
Effect confidenceSomewhat sure
ChangesParameterTo
Insider data exfiltration Rate of occurrence 85%
Insider data exfiltration Primary cost — typical 90%
Insider data exfiltration Primary cost — severe 75%
Insider data exfiltration Secondary loss probability 85%
Insider data exfiltration Secondary cost — typical 80%
Insider data exfiltration Secondary cost — severe 65%
Insider data exfiltration Records — typical 80%
Insider data exfiltration Records — severe 65%
Data breach Rate of occurrence 95%
Data breach Primary cost — typical 85%
Data breach Primary cost — severe 70%
Data breach Secondary loss probability 80%
Data breach Secondary cost — typical 70%
Data breach Secondary cost — severe 50%
Data breach Records — typical 70%
Data breach Records — severe 50%
AI Governance
CategoryMeasure
Implementation cost€1,000 / €5,000 / €7,500
Operating cost / year€45,000 / €50,000 / €55,000
Effect confidenceUnsure
ChangesParameterTo
Insider data exfiltration Rate of occurrence 90%
Insider data exfiltration Primary cost — typical 95%
Insider data exfiltration Primary cost — severe 85%
Insider data exfiltration Secondary loss probability 90%
Insider data exfiltration Secondary cost — typical 85%
Insider data exfiltration Secondary cost — severe 70%
Insider data exfiltration Records — typical 85%
Insider data exfiltration Records — severe 70%
Data exposure Rate of occurrence 70%
Data exposure Primary cost — typical 85%
Data exposure Primary cost — severe 70%
Data exposure Secondary loss probability 75%
Data exposure Secondary cost — typical 70%
Data exposure Secondary cost — severe 50%
Data exposure Records — typical 65%
Data exposure Records — severe 45%
Data breach Primary cost — typical 95%
Data breach Primary cost — severe 85%
Data breach Secondary loss probability 95%
Data breach Secondary cost — typical 90%
Data breach Secondary cost — severe 75%
Data breach Records — typical 90%
Data breach Records — severe 75%
Cost against other valueexpected, over 3 years
3 Is our project rational?