In 2017, the Belgian Cost of Cybercrime Project (KUL) published the results of an enlightening study aiming to measure the impact of cybercrime, and more broadly, cyber attacks, on Belgian businesses.
We can highlight two results from this paper: First, most businesses have been hit by one form or another of cyberattack, some even more than once a year. So, the likelihood of being hit is quite high.
Second, the average cost per incident is relatively low, with most falling below 500 euros, though some exceeding 10.000 euros. It certainly depends on the type of business you run and the size of your organization. That is, SMEs should not have to spend a fortune on security measures.
You can find the report here: https://www.apalala.be/wp-content/uploads/2023/01/BCC_ImpactCybercrimeBelgianBusinesses.pdf