Unmasking DLP: the Data Security Survival Guide
Enterprise Data Security: Definition and Solutions

My, how times have changed!

Today, companies don't sweat much over the loss of the hardware, which has dramatically come down in price. The real cost of a lost laptop is in the potential or actual exposure of the data on the PC, especially if it is customer records or intellectual property.

Laptop Losers Hall of Fame

In April 2009, Ponemon Institute released an Intel-sponsored report entitled "The Cost of a Lost Laptop." Ponemon interviewed 29 organizations that had experienced 138 separates cases of a lost laptop that was used by an employee, temporary employee or contractor. The cases represented missing or stolen computers belonging to companies in a wide range of industry classifications.

In this study, the average value of a lost laptop is $49,246. This figure is derived from a calculation involving seven cost components, including: laptop replacement; detection and escalation; forensics and investigation; data breach reporting and mitigation; intellectual property loss; lost productivity; and other legal or regulatory costs.

The study reveals that the cost of a lost laptop varies greatly by industry. The top four industries with the highest average cost of a lost laptop are services, financial services, healthcare and pharmaceutical. The bottom four industries are manufacturing, consumer products, retail and communications.

Since the hardware costs don't vary much by industry, it's obvious that the data loss costs are the differential. In the cases covered by this study, the occurrence of a data breach accounted for 80 percent of the total cost. And while the average cost is just over $49,000, it's possible for actual costs to reach much higher if the loss involves a data breach of thousands of sensitive records.

One factor in the cost of a lost laptop is how fast the company discovers and reacts to the loss. The study reports that if a company becomes aware of the loss the same day it happens, the average cost is only $8,950. If it takes more than a week to discover the loss, the cost jumps to an average of $115,849.