The risk that security incidents occurring at companies using the product will undermine confidence in the product itself and its brand reputation. This does not directly cover information leaks or system failures at the company itself, or liability for damages to third parties resulting from a virus infection.