Excellent article by Deloitte on “Quantifying Cyber Risk Across the C-Suite.” I agree, identifying risk factors prior to a cyber attack is viable to measure post impact. Many organizations incur significant recovery costs unexpectedly, however, if an estimation is known as well as the damages upfront companies may be better prepared to absorb expenses. I’ve always expressed the importance of security professionals being apart of the initial digital transformation conversation to discuss financial, reputational, and operational metrics.