I have been interested for several years about the impact of security incidents and privacy breaches on business. The Ponemon institute has done quite a bit of research on privacy, and last year did one specific to business impact. I’ve created over the years my own business impact tool based upon my researh and work with several different companies who have experienced breaches; it contains even more types of costs that the companies experienced than the Ponemon research identified. It would be interesting for the insurance companies that businesses use for their own liability and E&O insurance to keep track of these numbers. Such information would not only provide some good information to start more accurately keeping track of incidents than the current hit-or-miss subjective surveys and guessing, but it could also form the basis for some nice actuarial tables to apply within cybersecurity insurance.
Technorati Tags
security incident
breach impact