nerdexam
(ISC)2

CCSP · Question #9

The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, an organization that suffers a data…

The correct answer is D. Cost of detection. A data breach incurs significant costs related to compliance, reputation, and business loss, but the cost of detection of the breach would typically occur before the breach is confirmed and its negative effects are suffered.

Submitted by yuki_2020· Apr 18, 2026Legal, Risk and Compliance

Question

The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, an organization that suffers a data breach might suffer all of the following negative effects except __________.

Options

  • ACost of compliance with notification laws
  • BLoss of public perception/goodwill
  • CLoss of market share
  • DCost of detection

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    9% (2)
  • D
    87% (20)

Why each option

A data breach incurs significant costs related to compliance, reputation, and business loss, but the cost of *detection* of the breach would typically occur *before* the breach is confirmed and its negative effects are suffered.

ACost of compliance with notification laws

Data breaches often trigger legal and regulatory requirements for notification, leading to significant compliance costs.

BLoss of public perception/goodwill

A data breach severely damages an organization's public image and goodwill, impacting customer trust and brand reputation.

CLoss of market share

Loss of public trust and reputation due to a breach can directly lead to customers moving to competitors, resulting in a loss of market share.

DCost of detectionCorrect

The cost of detection refers to the expenses incurred in identifying that a breach has occurred, which precedes suffering the *negative effects* of the breach itself, such as compliance costs, reputational damage, and loss of market share. These negative effects are consequences *after* the breach has been detected and confirmed.

Concept tested: Business impact of data breaches

Topics

#Data Breach#Incident Response Costs#Regulatory Compliance#Risk Management

Community Discussion

No community discussion yet for this question.

Full CCSP Practice