"There are numerous cyber threats plaguing global organizations . . . Unknowns concerning the scale and impact of cyber threats [unknows about cost], as well as relative levels of vulnerability [unknowns about probability], threatens paralysis. Lacking accepted benchmarks, large organizations struggle to structure cyber resilience decisions and investments . . . Lacking proper guidance, businesses are increasingly delaying the adoption of technological innovations due to inadequate understandings of required countermeasures . . . A vicious circle results: uncertainty regarding proper levels of preparedness leads to forestalled investments in safeguards as interconnection expands exponentially."