Great point with respect to legislation forcing enterprise to...

Great point with respect to legislation forcing enterprise to decide to protect themselves (effectively insure themselves) pay the ransomeware or somehow get themselves back online. Though I'd like to see the economics make the case for cyber security and AR9.

The $11M paid by JBS obviously would not be the amount the attack actually cost the company (no production for ~1 week, worldwide). DL has stated that the average cost of each cyber attack is $277k every 10mins in Australia (likely increasing).

For the private sector to really take up cyber protection, in my view I'd like to see cyber companies address one of the questions I've been asking myself since my first deep dive- how do you know you are protected?

Without a metric to understand how the protection is operating (i.e. how many genuine attacks above and beyond perimeter protection have we resisted) it's difficult to understand the value cyber security adds, especially if you've never been shutdown like JBS and understand the true cost of the attack (and future attacks).

I'm with you re: LG, I think the private sector take-up will surprise however I'd really like to see AR9 push the business case via the economics.

All in good time....