Companies, like individuals, often operate in a state of wishful thinking that “it won’t happen to us.” You read about big security breaches at other organizations, but you think surely your business is too small and insignificant to be targeted, and/or you’re confident that you’ve taken the security precautions that those others overlooked. Maybe, maybe not. Your building probably won’t ever catch on fire and burn down, either – but chances are good that your organization still carries insurance coverage “just in case.”
Corporate crises can, as the article below notes, be caused by many things, but the basics of responding to one are the same. And a high profile security breach surely constitutes a corporate crisis, so the tips in the article for preparing to deal with a crisis situation are relevant and useful:
http://www.poole.ncsu.edu/erm/index.php/articles/entry/preparing-for-a-corporate-crisis/