Recognizing and Preparing Loss Estimates from Cyber-Attacks
G. Stevenson Smith · Information Systems Security · 2004
Today, no business or organization that is connected to the Internet can assume it is safe from a cyber-attack or a criminal act against its network by employees or others. When such attacks occur, businesses need to assess the amount of the loss from the crime. Without basic knowledge of loss valuation techniques, it is difficult to collect the necessary information needed to complete a loss valuation or determine how to prevent post-attack activities from increasing the losses.