The cost is influenced by factors such as the size of the company, industry risk level, existing cybersecurity measures, the scope of coverage (e.g., basic vs. comprehensive), and past incident history. High-risk industries or companies requiring extensive coverage will pay more per user​ (Howden Group).