Equipment is a direct monetary cost of a security incident. A direct monetary cost is a cost that can be easily measured and attributed to a specific security incident, such as the cost of repairing or replacing damaged or stolen equipment, the cost of hiring external experts or consultants, the cost of paying fines or penalties, or the cost of compensating the victims or customers. Equipment is a direct monetary cost of a security incident, as the security incident may cause physical or logical damage to the equipment, such as servers, computers, routers, or firewalls, or may result in the loss or theft of the equipment. The cost of equipment can be calculated by estimating the market value, the depreciation value, or the replacement value of the equipment, as well as the cost of installation, configuration, or integration of the equipment. Morale, reputation, and information are not direct monetary costs of a security incident, although they are important and significant costs. Morale is an indirect or intangible cost of a security incident, as it affects the psychological or emotional state of the employees, customers, or stakeholders, and may lead to lower productivity, satisfaction, or loyalty. Reputation is an indirect or intangible cost of a security incident, as it affects the public perception or image of the organization, and may result in loss of trust, confidence, or credibility. Information is an indirect or intangible cost of a security incident, as it affects the value or quality of the data or knowledge of the organization, and may result in loss of confidentiality, integrity, or availability. Indirect or intangible costs are costs that are difficult to measure or quantify, and may have long-term or hidden impacts on the organization.