Law enforcement involvement donut and column

Summary

Figures 21 and 22 slide: a purple-and-navy donut chart on share of ransomware attacks with law enforcement involved, beside a two-column chart on the resulting cost, with body copy to the left.

Visual description

White slide with standard chrome. The left column opens with a bold lead-in ("Figures 21 and 22. Organizations that involved law enforcement saw significant time and cost savings.") flowing into body. The right two-thirds holds two charts on soft gray rounded panels side by side. The left panel, "Share of ransomware attacks with law enforcement involved," is a donut split into a 63% purple arc (Law enforcement involved) and a 37% navy arc (Law enforcement not involved), each labeled inside, with a legend below. The right panel, "Cost of a ransomware attack by law enforcement involvement," is two columns (Law enforcement involved $4.64 in purple, Law enforcement not involved $5.11 in navy) over a $0 to $6 axis. Italic figure captions beneath each.

Key takeaway

Carrying one consistent color mapping across two different chart types: purple always means "law enforcement involved," navy "not involved," whether in the donut or the columns. That lets the donut's split and the column heights tell one continuous story. The matched gray panels tie the pair together.

Reuse notes

Use a single, fixed two-color encoding when the same binary appears in multiple exhibits on a page, so readers learn the colors once. A donut is acceptable here because it is a simple two-slice split with labels; avoid it for many small slices. Side-by-side panels work when each chart is compact.