9. All Sensitive Data Was Exposed
The size of a data breach is often commensurate with the cost of the breach, according to the Ponemon Institute. The more data that was exposed often translates into higher breach notification costs and a lengthy remediation period. Organizations may want to take a tip from the Payment Card Industry Data Security Standards, which recommends that merchants segment off the most sensitive systems from the rest of the network. At the very least, it makes it more difficult for an attacker to gain access to sensitive systems -- and the longer it takes to gain access, the higher the probability that systems will detect an ongoing intrusion in progress.