Business Needs
A Research & Development department in a global conglomerate with an outsourced IT operation performed a risk analysis and identified a need to further protect highly confidential information such as new products, product recipes, etc. The loss of this data would potentially jeopardize the future of several large entities within the enterprise. Even though, strong mitigating security controls are in place internally and with the outsourcing vendor, the risk for loss of this data would be such a significant event that needed further mitigation.
This type of event could also be classified as a black swan event. Black swan event is a metaphor that describes an event that comes as a surprise, has a major effect, and is often inappropriately rationalized after the fact with the benefit of hindsight.