This report presents key findings related to ransomware susceptibility among companies, particularly focusing on the Ransomware Susceptibility Index™ (RSI). It indicates that 92% of companies have at least one high-severity vulnerability due to outdated systems, while 15% of companies exceed the critical RSI threshold, highlighting significant risk factors. The report notes that 82% of companies have publicly visible ports, which are critical resources exploited by ransomware groups. The report also discusses the trend of exploiting vulnerabilities that allow remote code execution, which is becoming increasingly common in the ransomware community. Additionally, it outlines how Black Kite utilizes the OpenFAIR™ methodology to quantify cyber risk in financial terms, allowing organizations to estimate the potential costs associated with cyber breaches. The findings emphasize the importance of understanding these vulnerabilities to enhance vendor risk management programs and improve overall cybersecurity posture.