Which of the following is NOT a consequence to an organization that has suffered a data security breach?
a. Reputation damage
b. Monetary fine
c. De-escalation of reporting requirements
d. IP theft