What would a security incident actually cost you?
Most business owners can picture the ransom demand. Few picture the weeks offline, the staff who can't work, the tender they miss, and the customers who quietly go elsewhere. This calculator puts a real number on all of it, specific to your business.
Jump straight to the calculatorThe risk is real, and it’s not slowing down
These aren’t scare tactics. They’re the most recent figures from the Australian government and independent industry research, cited so you can check them yourself.
Average self-reported loss per incident for small businesses in 2024–25, up 14% on the year before.
Source: ACSC Annual Cyber Threat Report 2024–25, via Cyber Daily →Average self-reported loss for medium-sized businesses in 2024–25, up 55% on the year before.
Source: ACSC Annual Cyber Threat Report 2024–25, via Cyber Daily →Of all reported cybercrime in 2024–25 was ransomware, a steady share, not a shrinking one.
Source: ACSC Annual Cyber Threat Report 2024–25, via Cyber Daily →The rate at which Australian businesses and individuals reported cybercrime to ReportCyber in 2024–25 (84,700+ reports for the year).
Source: ACSC Annual Cyber Threat Report 2024–25, via Cyber Daily →Data breaches notified to the Privacy Commissioner in just the first half of 2025, 59% were malicious or criminal attacks, not accidents.
Source: OAIC Notifiable Data Breaches statistics, Jan–Jun 2025 →Of notified data breaches in the same period were caused by human error, not an outside attacker. It’s not only about hackers.
Source: OAIC Notifiable Data Breaches statistics, Jan–Jun 2025 →Work out your own number
Five numbers is all it takes. Nothing you enter is sent to us or stored anywhere: the whole calculation happens in your browser.
We don’t see or store anything you enter here. It stays in your browser and disappears when you close this tab.
Include super and on-costs if you can.
Rent, utilities, insurance, equipment leases and the like.
Prepared by Consider IT ·
Your estimated daily downtime cost
$0
per day you're offline or disrupted
What this number doesn’t capture
The daily cost above is just wages and overheads still going out the door, and revenue not coming in. A real incident usually brings extra costs on top that are harder to put a precise number on, but are just as real.
- Missing a tender or sales deadline because your systems are down
- Not being able to process payroll or pay suppliers on time
- Penalty clauses, rework, or delays on projects already underway
- Specialist recovery costs and replacing damaged infrastructure
- Customers who quietly move to a competitor and don’t come back
Are you spending enough to reduce this risk?
A dollar figure for what an incident could cost is only half the picture. The other half is whether your current IT investment is realistically enough to make that incident less likely, and less severe, in the first place.