Isaca
CISM · Question #671
Which of the following is MOST difficult to measure following an information security breach?
The correct answer is D. Reputational damage. Reputational damage is the most difficult to measure after a security breach because it involves intangible impacts on customer trust, brand perception, and future business opportunities, which are not easily quantifiable.
Submitted by marco_it· Apr 18, 2026Information Security Incident Management
Question
Which of the following is MOST difficult to measure following an information security breach?
Options
- AReplacement efforts
- BHuman resource costs
- CRegulatory sanctions
- DReputational damage
How the community answered
(51 responses)- A2% (1)
- B6% (3)
- C4% (2)
- D88% (45)
Explanation
Reputational damage is the most difficult to measure after a security breach because it involves intangible impacts on customer trust, brand perception, and future business opportunities, which are not easily quantifiable.
Topics
#breach costs#reputational damage#incident impact#cost measurement
Community Discussion
No community discussion yet for this question.