Hi Brenda. Funny thing is that I have been tasked with doing risk assessments for information security. The challenge there is lack of good statistical data about the financial losses incurred during and after various incidents.