Resource/Financial loss

[akadams]

Where should financial/resource consequences be represented? In the, e.g., hardware asset? As a new link in the data assets?

[von]

E.g. Unauthorized use of commercial web service. Or DDOS of your service.

Consequence is you have fewer resources to do other stuff.

[von]

Ransomware?

[dopheide-esnet]

Financial loss is easily understood by scientists, perhaps a small paragraph describing consequences that weren't clear from existing incident examples. --Karen

[akadams]

Sounds like we think it should be an asset, and defined in the Asset definition.

[von]

I think specifically in "Intangible and Human Assets"