Aberdeen Group's Monte Carlo analysis makes use of empirical data from the Verizon Data Breach Investigations Report (DBIR) — including the likelihood of a data breach, and estimates for the cost of a data breach — to quantify the risk of a data breach, as a function of industry, the number of records compromised, and the size of the organization. For example: for small businesses of up to 1,000 employees, the risk of a data breach is higher than the risk for large organizations, by about 35%.
