Once you have a breach, the expectations of your organisation are clearly defined and backed by numerous regulators eager to show their constituencies that they mean business.
This is a major concern for your Board of Directors and is probably the last thing you are prepared to deal with.
The Value of Incident Response Planning discusses:
While most organisations have threat and vulnerability management programmes, very few, if any, have consequence management programmes. Understanding and planning for those consequences will lead to better alignment with the Executive Team and the Board.