Industrial Cybersecurity & OT Risk worked example

Incident Response Cost at 54% incident scope included: a worked example

Here is what the math looks like when conditions slip. We hold every other input steady and drop incident scope included to 54%, then walk the calculation through step by step. Estimate OT incident response cost using response work packages, cost per package, affected scope, and fixed coordination costs.

The inputs for this scenario

  • OT response work packages: 24 work packages (held at the documented default)
  • Cost per response work package: 6,500 $ / work package (held at the documented default)
  • Incident scope included: 54 % (the input this scenario stresses; the baseline uses 75)
  • Fixed incident coordination cost: 30,000 $ (held at the documented default)

Working through the calculation

  • The calculation starts from the formula this tool documents: Variable incident response cost = OT response work packages × cost per response work package × incident scope included.
  • Total incident response cost works out to 114,240 $ at these inputs, and this is the headline figure for the scenario.
  • Cost per response work package works out to 4,760 $ / work package at these inputs.
  • Variable incident response cost works out to 84,240 $ at these inputs.
  • Fixed incident coordination cost works out to 30,000 $ at these inputs.

How this compares with the baseline

  • Against the tool's baseline example, where incident scope included sits at 75% and the headline result is 147,000 $, this scenario comes in 22.29% below the baseline at 114,240 $.
  • The practical read: the gap between this scenario and the baseline is entirely attributable to incident scope included, so recovering it is worth quantifying in dollars before considering equipment or staffing changes. It models direct response labor and coordination only — it excludes production downtime, lost revenue, regulatory fines, and reputational cost, which often dwarf the response bill.

Results at a glance

  • Total incident response cost: 114,240 $ (headline result)
  • Cost per response work package: 4,760 $ / work package
  • Variable incident response cost: 84,240 $
  • Fixed incident coordination cost: 30,000 $

Run it with your numbers

  • To rerun this with your own numbers, open the live Incident Response Cost calculator, set incident scope included to your actual value, and adjust the remaining inputs to match your operation.

Last reviewed 2026-05-12.