Measuring impact beyond a single incident

In an environment where very limited transparency on the root cause and the true impact is afforded, we are left with isolated examples to point to the direct cost of a security incident.