Less widely understood and discussed are the variable costs related to incident response, which can differ widely from case-to-case and if unmanaged can run far higher than fixed costs.

FORBES: Data Breach FUD: Fear, Uncertainty And Dollars