# How do I calculate the cost of one day of IT downtime?

Add up four things for one working day: lost revenue or margin, wages paid while people cannot work, the cost of recovery, and penalties or knock-on costs. Lost revenue is what you would normally invoice or sell in a day, or the margin on it, for the share of the business that stops without IT. Idle wages are the staff who cannot work, multiplied by their daily cost. Recovery covers overtime, external help, replacement hardware and restoring data. Knock-on costs include late-delivery penalties, overnight shipping to catch up, lost customers and, if personal data is involved, notification work. Do the sum for one day, then ask how many days a ransomware recovery would really take with your current backups. Use your own figures, not industry averages, and write down the assumptions so finance can check them. The result tells you what a week of prevention and detection is worth.

FAQ: [Budget, staff and alert noise](https://netsenx.com/en/faq/budget) · https://netsenx.com/en/faq/how-to-calculate-the-cost-of-one-day-of-it-downtime

## Read next

- https://netsenx.com/en/pricing
- https://netsenx.com/en/ndr-for-small-business

## Related questions

- [How do I justify a security tool to management?](https://netsenx.com/en/faq/how-to-justify-a-security-tool-to-management)
- [How much does network detection and response cost for a 50-person company?](https://netsenx.com/en/faq/how-much-does-ndr-cost-for-a-50-person-company)
- [How much does NDR cost for a 200-person company?](https://netsenx.com/en/faq/how-much-does-ndr-cost-for-a-200-person-company)
- [Why don't security vendors publish prices?](https://netsenx.com/en/faq/why-dont-security-vendors-publish-prices)
- [Why does the price jump when we add sites, segments or modules?](https://netsenx.com/en/faq/why-does-the-price-jump-when-we-add-sites-or-modules)