Two Frameworks, Same Question: What Would a Breach Actually Cost?

Halfway through the gap analysis, I had a spreadsheet with dozens of rows, each one marked "fully implemented," "partially implemented," or "not implemented" against an ISO 27001:2022 Annex A control.