These graphs summarize the findings in the U.S. Cybersecurity and Infrastructure Security Agency (CISA)'s reports. This connects exploited-vulnerability reality (CISA KEV) with economic impact: recovery speed is the controllable variable.
About 20% of known exploits allow for remove code execution (i.e. ransomware)
Every major operating system of a target
Per Incident Losses for SMBs could range from between $5,000 and $60,000; much more for larger organizations
Book a strategy session to see how fast you can expect to recover with your current setup and what changes would materially reduce downtime.