Getting caught losing sensitive data is expensive. There are significant hard costs in mitigation and remediation to affected individuals, as well as regulatory fines and fees to support increased audits. However, often unappreciated are the soft costs to brand equity and competitive advantage. Enterprises are penalized in both the court of law and the court of public opinion.