Summary

Answering the question of “How much did that incident cost?” is an extremely challenging task. Damage estimates will vary greatly from incident to incident. This chapter explored several aspects of costs associated with computer incidents and discussed one study performed for universities in detail. Although we cannot provide a single equation that will help to calculate the costs for all incidents, we have provided enough insight into areas of costs to make the task a little less challenging.

The most important thing is to identify all costs that result from the incident. This total will normally include the costs associated with identifying and recovering from an incident as well as any direct damages. Intangible costs, if known, should ...

Get Effective Incident Response Team, The now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.