Assess the cost of your cyber risk

Calculate in real time the potential cost of a cyber incident for your organization.

Your organization

Annual revenue50 M€
Operating margin10.0%

Your digital dependency

What impact would a major IT outage have on your business?

Your suppliers

Classify your suppliers by criticality in the 3 categories below:

Class C — regular suppliers100

Recurring suppliers without critical access to your IT systems or sensitive data.

Class B — critical suppliers20

Suppliers who access your IT, process your data, or whose failure impacts your operations.

Class A — strategic suppliers5

Partners whose compromise would directly threaten your business, critical data, or compliance.

Total125 fournisseurs

Current third-party assessment

Risk level

ÉLEVÉ

High exposure through the software supply chain (MOVEit, SolarWinds)

Applicable regulations : RGPD, NIS 2 · Exposed data : personal data

Total cost in case of incident

900 k€

i.e. 1.8% of your revenue

Business loss
361 k€
Estimated downtime: 18 days × 6 k€/day111 k€
Post-incident client loss250 k€
Remediation
539 k€
Investigation forensic (35%)189 k€
Reconstruction technique (28%)151 k€
Juridique & notification (21%)113 k€
Renforcement sécurité (12%)65 k€
Communication de crise (4%)22 k€

18 days

Estimated disruption duration

Sector average (Varonis 2025)

2.5 M€

Maximum revenue loss risk

18 days de CA, soit 4.9%

Probability of incident this year

48.4%

Direct risk40.0%
Sector baseline [Services numériques & IT]+40.0%
Third-party risk13.9%
30% of breaches involve a supplier+12.0%
125 at-risk suppliers+1.9%
Assessment: no reduction⚠ no reduction

5

Class A

20

Class B

100

Class C

Sources: IBM X-Force 2025, Verizon DBIR 2025, Ponemon 2024, Sophos 2025, ENISA 2024.

Want to reduce this exposure?

Our experts support you in assessing and managing third-party risk.

Talk to an expert
Parlez à un
expert Conitiv