Examining the costs and causes of cyber incidents