Direct and indirect incident costs: halted operations, fines, lost clients, ransom, forensics, and reputational impact nobody budgets for.