A hospital purchases a cybersecurity insurance policy so they will be compensated if patient data is stolen.
What strategy are they using?
A small tutoring company knows its scheduling software is slightly outdated, but replacing it would cost more than the potential losses from an attack. They decide to keep using it.
What strategy are they using?
An online retailer upgrades its firewall and hires a security firm to monitor network activity in real time.
What strategy are they using?
A university stops allowing students to store personal files on campus servers and instead directs them to use a secure cloud service run by another provider.
What strategy are they using?
A company discovers that an outdated payment processing system is vulnerable to cyberattacks. They decide to stop offering online payments entirely.
What strategy are they using?
A bank installs advanced intrusion detection software but acknowledges that no system is 100% secure and some chance of a breach still exists.
What is this leftover risk called?