The cost of a cyber attack for a company: between 150,000 euros and tens of millions, with effects that are difficult to measure
The costs of a cyber attack on a Romanian company can easily exceed 150,000 euros, and in major cases can reach tens of millions, warns Dan Cîmpean, director of the National Cyber Security Directorate (DNSC).
Dan Cîmpean, DNSC director
“A significant attack on an average organization can easily cost around €150,000,” said Dan Cîmpean at the “Adevărul” Interviews. “In cases of major incidents, and we've had a few nationally, the costs can very quickly run into tens of millions of euros.”
According to him, the real losses are difficult to quantify. “It's quite complicated to quantify the loss to an organization, because it's not just the immediate costs of restoring service and infrastructure“, explained Cîmpean. “We also have to consider the opportunity cost, the business lost by that organization.”
The DNSC director also draws attention to the reluctance of small and medium-sized companies to report such incidents: “We notice that there is a reluctance to report losses”he says, adding that the lack of transparency affects the authorities' ability to provide quick support and assess the true scale of the phenomenon.
In the context of the intensification of computer attacks on the private environment, Dan Cîmpean emphasizes that prevention is always cheaper than post-incident intervention: “It's easier to invest in education, awareness and staff training than to pay the costs of remediation after an attack.”
