Cause

• Loss or theft of laptops and mobile devices
• Unauthorized transferred of data to USB devices
• Improper categorization of sensitive data
• Data theft by employees or external parties
• Printing and copying of sensitive data by employees
• Insufficient response to intrusions
• Unintentional transmission of sensitive data

Effect

• Brand damage and loss of reputation
• Loss of competitive advantage
• Loss of customers
• Loss of market share
• Erosion of shareholder value
• Fines and civil penalties
• Litigation / legal action
• Regulatory fines / sanction
• Significant cost and effort to notify / affected parties and recover from the breach