...iceberg, because in practice you can’t nail down the lostsales, reputation damage and future legal claims that are...of many further consequential damages, such as future lostsales, are largely academic, as they're not measurable...
http://www.computerweekly.com/blogs/david_lacey/economics-of-security/