Mitigating financial loss and reputational damage

Tip: Choose Save as PDF in the print dialog to download. Use A4 paper size.

Mitigating financial loss and reputational damage

Name:
Date:
Class:
A

Quick Questions

Shade in the A or B circle for each question.

1. Which statement best describes how strong security reduces financial loss after a data incident?
A It lowers direct costs such as fines and recovery work because fewer incidents happen and they are smaller
B It removes the need to ever pay for recovery because attacks can no longer happen
2. A retailer's customer database is breached. Which action helps protect its brand and public trust?
A Keeping customer data in plain text so it is quicker to access
B Encrypting stored customer data so stolen files cannot be read
3. Which is a DIRECT cost of a data incident?
A A fine from a regulator and the bill for recovery work
B Customers choosing to shop elsewhere in future
4. After a major breach, an organisation's share price falls. This is mainly an example of:
A Financial loss linked to lost investor confidence
B A security control that detects threats
5. Which choice is most likely to reduce the number of customers lost after an incident?
A Hoping customers do not hear about the incident
B Having tested security controls and a response plan that limit the harm to customers
B

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left columnRight column
1Mitigation Acustomers_lost = customers_before - customers_after
2Direct costs = fines + recovery Bshare_price_drop = price_before - price_after
3Strong security keeps customers loyal, so fewer leave and revenue is protected after an incident CFinancial recovery does not automatically restore brand and public trust. Reputational damage can last long after costs are paid, so prevention matters.
4A breach that damages public trust can push the share price down, and mitigation limits that fall DImmediate money spent after a breach, such as penalties and the cost of restoring systems, which strong security helps keep low
5Mitigation only covers the fine paid to the regulator EUsing strong security to cut the money lost and the damage to brand and public trust after a data incident
6Once the money is recovered, trust is also repaired FMitigation is wider than fines. It also reduces recovery costs, lost customers, brand damage and share price falls.
C

Definitions

Mitigation
D

Fill in the Blanks

Complete each line of code by filling in the missing parts.

1.
directCosts ← _____ + recoveryCost
2.
lostRevenue ← _____________ * avgSpend
3.
IF trustDrops THEN __________ ← sharePrice - 5
4.
IF securityStrong THEN totalLoss ← ___
5.
totalLoss ← directCosts _ lostRevenue
E

Spot the Error

Shade in the letter of the line that contains an error.

Question 1
A fine ← 50000
B recovery ← 20000
C directCost ← fine - recovery
D OUTPUT directCost
Question 2
A IF customersLost < 0 THEN
B revenue ← revenue - sales
C END IF
D OUTPUT revenue
Question 3
A price ← 5.00
B drop ← 0.20
C price ← price + drop
D OUTPUT price
Question 4
A costs ← [fine, recovery]
B total ← AVERAGE(costs)
C OUTPUT total
Question 5
A backups ← TRUE
B IF backups = TRUE
C recoveryCost ← 10000
D ELSE
E recoveryCost ← 90000
F END IF

Answer Key

Mitigating financial loss and reputational damage
Section A: Quick Questions
Q1
A — It lowers direct costs such as fines and recovery work because fewer incidents happen and they are smaller
Q2
B — Encrypting stored customer data so stolen files cannot be read
Q3
A — A fine from a regulator and the bill for recovery work
Q4
A — Financial loss linked to lost investor confidence
Q5
B — Having tested security controls and a response plan that limit the harm to customers
Section B: Match the Pairs
Q1
Mitigation → Using strong security to cut the money lost and the damage to brand and public trust after a data incident
Q2
Direct costs = fines + recovery → Immediate money spent after a breach, such as penalties and the cost of restoring systems, which strong security helps keep low
Q3
Strong security keeps customers loyal, so fewer leave and revenue is protected after an incident → customers_lost = customers_before - customers_after
Q4
A breach that damages public trust can push the share price down, and mitigation limits that fall → share_price_drop = price_before - price_after
Q5
Mitigation only covers the fine paid to the regulator → Mitigation is wider than fines. It also reduces recovery costs, lost customers, brand damage and share price falls.
Q6
Once the money is recovered, trust is also repaired → Financial recovery does not automatically restore brand and public trust. Reputational damage can last long after costs are paid, so prevention matters.
Section C: Definitions
Q1
Mitigation — Using strong security to cut the money lost (fines, recovery costs, lost customers, falling share price) and the damage to brand and public trust after a data incident.
Section D: Fill in the Blanks
Q1
directCosts ← fines + recoveryCost
Q2
lostRevenue ← lostCustomers * avgSpend
Q3
IF trustDrops THEN sharePrice ← sharePrice - 5
Q4
IF securityStrong THEN totalLoss ← LOW
Q5
totalLoss ← directCosts + lostRevenue
Section E: Spot the Error
Q1
C — Direct costs such as fines and recovery add together to give the total cost of an incident. The line should use + instead of -.
Q2
A — Revenue only falls if customers were lost, and a count of lost customers cannot be negative. The condition should be > 0.
Q3
C — A data incident makes the share price fall, so the drop must be subtracted. The line should use - instead of +.
Q4
B — The total financial loss is the sum of all the costs, not their average. The line should use SUM(costs).
Q5
B — An IF statement must end with THEN. The line should be IF backups = TRUE THEN.