The Cambridge Centre for Risk Studies (CCRS) and Kivu Consulting Inc. (Kivu) have combined efforts to pioneer new research to benchmark cost effective responses to cybercrime. This research combines a novel dataset on ransom payment information, company attributes, and effective security controls for remediation to support Chief Information Security Officers (CISOs), Chief Research Officers (CROs), and Risk Managers in assessing and managing the threat of ransomware