The actual costs that an organization must pay to procure and replace hardware and software, as well as to any repair companies for their labor.

• A. Loss of Reputation
• B. Data Loss
• C. Cost of Repairs
• D. Security Training

Answer: (C)

The main concept is the direct, out-of-pocket financial impact needed to recover from an incident. It describes the actual payments to procure or replace hardware and software and the labor costs charged by repair providers. That is what cost of repairs captures—the tangible money spent to restore operations. Reputational harm, data loss, and security training describe other kinds of impact (intangible effects, information loss, or prevention-focused costs) rather than the immediate restoration expenses. So the described costs align with cost of repairs.