Business risk
Data exfiltration
Unauthorised extraction of information from the company's systems, with the consequent obligation to notify and, if necessary, respond to those affected.
In practice
The cost is not the data: it is the notification, legal advice, sanctioning file, and third-party claims. The cyber policy organises these items and sets a deadline for each.
Where it is addressed
This term is covered in Ciberriesgo y datos and applies when taking out Ciber-riesgo.
