Impact of a cyber attack on an organisation

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. A ransomware attack locks a company's computers for three days and staff cannot take orders. Which impact is this?

A Downtime: lost operations

B Fines for breaking privacy law

2. Which cost is a recovery cost after a cyber attack?

A Customers choosing to trust the business more

B Paying experts to clean systems and restore data

3. After a data breach, many customers close their accounts because they no longer feel safe. What is this?

A A recovery cost

B Loss of customer trust

4. True or false: A cyber attack only harms an organisation while its systems are offline.

A False: harm can last long after systems return

B True: harm ends when systems are back online

5. An organisation fails to protect personal information and is penalised under privacy law. Which impact is this?

A A fine

B Downtime

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1downtime		AA period when systems are offline after an attack, so staff cannot work and customers cannot be served
2recovery costs		Bfines
3After a data breach, customers stop trusting a business with their personal information and take their custom elsewhere		CAn attack harms the whole organisation, not just one computer. It can cause downtime, costs, lost trust and fines.
4An organisation can be penalised by the regulator when a cyber attack shows it failed to protect personal data as privacy laws require		DCosts continue after systems return. There are recovery costs, a damaged reputation and possible fines, which can last for months.
5A cyber attack only affects the attacker's target computer, so the business itself is not harmed.		EMoney spent on investigating the attack, restoring data, repairing systems and paying experts after an incident
6Once the systems are switched back on, the attack has no further cost for the organisation.		Floss of customer trust

Definitions

organisational impact

Fill in the Blanks

Complete each line of code by filling in the missing parts.

lossPerHour = 5000 hoursDown = 6 cost = lossPerHour _ hoursDown

recovery = 12000 fine = 50000 total = recovery _ fine

lost = 250 __ lost > 100: print("Trust lost")

fine = 50000 if fine _ 0: print("Legal penalty applied")

total = 30000 + 12000 + 50000 _____("Total cost:", total)

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A hours = 6

B per_hour = 2000

C lost = hours * per_hour

D print("Lost:", lost

Question 2

A recovery == 15000

B legal = 4000

C total = recovery + legal

D print("Cost:", total)

Question 3

A breach = True

B if breach

C fine = 50000

D print("Fine:", fine)

Question 4

A customers = 1000

B lost_pct = 0.2

C left = customers + lost_pct

D print("Left:", left)

Question 5

A total = 0

B for cost in [500, 800, 1200]:

C total = total - cost

D print("Total:", total)

Answer Key

Impact of a cyber attack on an organisation

Section A: Quick Questions

A — Downtime: lost operations

B — Paying experts to clean systems and restore data

B — Loss of customer trust

A — False: harm can last long after systems return

A — A fine

Section B: Match the Pairs

downtime → A period when systems are offline after an attack, so staff cannot work and customers cannot be served

recovery costs → Money spent on investigating the attack, restoring data, repairing systems and paying experts after an incident

After a data breach, customers stop trusting a business with their personal information and take their custom elsewhere → loss of customer trust

An organisation can be penalised by the regulator when a cyber attack shows it failed to protect personal data as privacy laws require → fines

A cyber attack only affects the attacker's target computer, so the business itself is not harmed. → An attack harms the whole organisation, not just one computer. It can cause downtime, costs, lost trust and fines.

Once the systems are switched back on, the attack has no further cost for the organisation. → Costs continue after systems return. There are recovery costs, a damaged reputation and possible fines, which can last for months.

Section C: Definitions

organisational impact — The harm a cyber attack does to a business or group, such as downtime, recovery costs, lost customer trust, a damaged reputation and fines for breaking privacy laws.

Section D: Fill in the Blanks

lossPerHour = 5000
hoursDown = 6
cost = lossPerHour * hoursDown

recovery = 12000
fine = 50000
total = recovery + fine

lost = 250
if lost > 100:
    print("Trust lost")

fine = 50000
if fine > 0:
    print("Legal penalty applied")

total = 30000 + 12000 + 50000
print("Total cost:", total)

Section E: Spot the Error

D — The print call is missing its closing bracket. It should be print("Lost:", lost) so the downtime loss is shown.

A — A double equals sign compares values. It does not store the recovery cost. Use a single = to assign: recovery = 15000.

B — An if statement must end with a colon. The line should be if breach: so the fine code runs after a breach.

C — To find how many customers leave, multiply the customer count by the percentage lost. Adding gives a meaningless number. It should be customers * lost_pct.

C — Each recovery cost must be added to the running total, not subtracted. It should be total = total + cost.