If executives are found liable for not properly protecting their company's assets and information systems, what type of law would apply in this situation?

Common law refers to a legal system based on judicial precedent rather than codified statutes, and is a classification of legal system, not a type of liability applicable to corporate negligence.

Criminal law involves prosecution by the state for offenses against society, and corporate failure to protect information systems is generally not a criminal matter unless fraud or intentional misconduct is involved.

Civil law governs disputes between private parties, including cases where executives breach their fiduciary duty to protect company assets and information systems. This area covers tort and negligence claims where the injured party seeks monetary damages or other remedies. It is distinct from criminal law because the government does not prosecute these cases - rather, the harmed parties pursue action through civil courts.

International law governs relationships between sovereign nations and international entities, not internal corporate liability for information security failures.