Source: https://www.rsa.com/content/dam/en/white-paper/cyber-risk-appetite.pdf