Phishing Downtime Cost Estimator

1. Count affected employees
Enter the workers whose productive time is disrupted by the incident.

2. Estimate elapsed downtime
Use average unavailable or impaired hours per affected employee and system.

3. Value workforce loss
Enter loaded hourly cost and the percentage of productivity actually lost.

4. Add system and response costs
Enter hourly revenue or service impact plus direct response and recovery expense.

5. Review the cost components
Use the breakdown to see whether workforce, service interruption, or response drives the estimate.

Total downtime cost = Employees × Hours × Loaded hourly cost × Productivity loss + Hours × System loss per hour + Response cost

Variables: Use the values and units entered above. Percentages are converted to decimals in the calculation.

What the result means

The result estimates direct incident cost from modeled downtime and response components.

Exclude costs already included elsewhere to prevent double counting, and model fraud or legal exposure separately when material.

Given:
• 65 affected employees
• 7 hours downtime
• $60 loaded hourly cost
• 75% productivity loss
• $4,000 system loss per hour
• $32,000 response cost

Calculation:
Labor cost = 65 × 7 × $60 × 75% = $20,475
System loss = 7 × $4,000 = $28,000
Total = $20,475 + $28,000 + $32,000 = $80,475

Result:
Estimated phishing downtime cost is $80,475. Direct response is the largest component in this scenario.