So many cyberattacks could have been prevented if the firm knew just how painful they are and took even a little more proactive action. People lose their jobs. The costs are often massive. Firms can be completely dead for weeks or even months. Reputation is damaged.