How We Calculate Your Cyber Risk
Average cyber attack cost (£990 base): • Source: UK Cyber Security Breaches Survey 2025
• Adjusted by business type, security posture, and data sensitivity
• Healthcare businesses face 80% higher costs due to compliance requirements
• Poor security measures can increase costs by 100%
Financial fraud from data breaches (£5,900 base): • Source: UK Cyber Security Breaches Survey 2025 (cyber-facilitated fraud)
• What this means: After stealing your data, criminals commit fraud against you or your customers
• Common examples: Unauthorized bank transfers, fake supplier invoices, stolen customer payment details, business email compromise requesting payments
• How we calculate YOUR risk: £5,900 × risk multipliers
• Risk multipliers include:
- Business type: Healthcare (1.8×), Professional (1.3×), Retail (1.2×)
- Data sensitivity: Financial data handling significantly increases fraud risk
- Security posture: No security (2.0×), Basic antivirus (1.5×), Some tools (1.2×)
- Revenue scale: Higher revenue businesses are targeted more (up to 5× for £500k+)
- Employee count: 15% additional risk per employee beyond first
• Timeline: Fraud often happens weeks/months after the initial breach
• Real example calculation: A £100k healthcare practice with financial data and no security:
Base fraud risk: £5,900
× Healthcare multiplier: 1.8
× Financial data risk: 1.6
× No security: 2.0
× Revenue factor: 1.0 (for £100k turnover)
× Employee factor: 1.0 (single practitioner)
= £5,900 × 5.76 = £33,984 annual fraud risk
This means this practice faces nearly £34k in potential fraud losses per year
Business disruption & revenue Loss: • Base: 1.9% of annual revenue (Howden Insurance Broker research 2024)
• Includes: Lost sales, productivity loss, customer churn, recovery costs
• Average UK business takes 38 days to identify and 43 days to recover
• Multiplied by risk factors: business type, data sensitivity, security posture
GDPR fines (1-4% of turnover): • Legal maximum: 4% of annual turnover or €20 million
• Basic business data: 1% risk (lower ICO enforcement)
• Customer contact info: 1.5% risk
• Financial/payment data: 2.5% risk
• Personal/sensitive data: 3% risk
• Highly regulated data: 4% risk (maximum penalty likely)
Additional compliance requirements: • Healthcare: CQC requirements, NHS Data Standards
• Professional Services: SRA, ICAEW, professional body standards
• Retail: PCI DSS for card payment processing
• Consultants/Trades/Creative: GDPR only
Risk multiplier factors: • Business type: Care providers (1.8x), Professional services (1.3x), Retail (1.2x)
• Current security: No measures (2.0x), Basic antivirus (1.5x), Some tools (1.2x)
• Revenue scale: Higher revenue = higher targeting (max 5x for £500k+ businesses)
• Employee count: More employees = larger attack surface (15% per additional employee)
• Data sensitivity: Multiple sensitive data types compound risk
Note: Even businesses with "some security tools" show elevated risk because modern threats require comprehensive, layered protection with 24/7 monitoring.
Why these calculations matter: These aren't scare tactics - they're based on real government data and insurance industry research. Real example: A small accounting firm had their email compromised. Criminals sent fake invoices to clients requesting payment to a different bank account, stealing £12,000 before being discovered.
The ICO has fined businesses millions for GDPR breaches, and cyber attacks cost UK businesses £27 billion annually.
Your protection investment | Swan Guard Pro (Recommended)
£16.79/month
£201 per year
£13.99 + VAT per employee per month
All prices quoted are per user, per month with a minimum commitment of 12 months
Customise your protection
