Comment by ordx

I imagine it would be sufficient to show that he had to spend time or money analyzing the security impact of the event.