If executives are found liable for not properly protecting their company's assets and information systems, what type of law would apply in this situation?

Criminal law deals with offenses against society as a whole, typically involving prosecution by the government and penalties like imprisonment or fines paid to the state, which is distinct from liability for corporate asset protection failures unless criminal intent (e.g., fraud) is proven.

International law governs relations between sovereign states and international entities, not the internal liability of executives within a company for domestic asset protection.

Common law refers to a legal system based on judicial precedents rather than codified statutes, and while civil cases are often adjudicated within a common law framework, it is a system of law, not the specific type of law (like civil or criminal) that defines the nature of the liability.

Civil law governs disputes between individuals or organizations, focusing on remedies such as financial compensation for damages rather than punishment for crimes against the state. Executives failing to properly protect company assets often face civil lawsuits for negligence, breach of fiduciary duty, or other torts, which seek to hold them accountable for losses incurred by the company or its stakeholders.