80% of orgs that paid the ransom were hit again
If an insurance company would also offered IT security included in the premium, they should be able privide better security at a lower total cost. Actuaries could even asist in calculating how much risk is mitigated by each security measure, and optimize meausures to match costs to risk.