Investor / Analyst

In sectors with strong product liability, investors price recall risk and litigation exposure into valuations before anything goes wrong.

Breaches move valuations, but they move the operator's. One defect class in a widely used product can cost thousands of downstream organizations while the manufacturer's shares barely register it (see E-07).

Nothing is priced in advance because no one publishes whether the same defect class ships year after year (see PR-05). The question is whether that changes gradually, or after one event makes it obvious.

Discussion prompts

• What would you need to see from a software company to price its defect risk before an incident rather than after?
• Which of your holdings would you reprice tomorrow if defect class history were public?
• What evidence would convince you a board is managing product security well enough to change your position?