I believe the first step to this would be to define the value of data i.e financial records, pii has greater value than say a personal movie collection. You could then follow up with relevant laws and regulations to set standards and determine liability in different industries.
A definite figure would be difficult to calculate but the best example is ex-NSA director Keith Alexander billing Wall Street banks a million dollars each in consultation fees.
--Mark.
Skunks,
When asked what is the size of the market in terms of IT data security, how do you respond to this? I Know the market is enormous but how do you expound on this? Any ideas