Much has changed since the early20th century bank robber Willie Sutton, when asked why he chose histargets, reportedly said, “Because that's where the money is.”Criminals are now using tools Sutton couldn't have dreamed of, buttheir philosophy in choosing targets remains pretty true tohis.

Many attacks are now perpetrated online, alarming growth involume and sophistication over the past two years. Equallydistressing is the range of perpetrators, from conventional hackersand disgruntled employees to well-funded nation-states, terroristorganizations, and criminal groups. Their top target in manyattacks: corporate treasury.

That's where the corporate money is. But some hackers thattarget treasury have more in their sights than direct theft ofcompany funds. Treasury systems are repositories of sensitive datathat can be stolen. Crucial financial systems also can be shutdown, either for ransom or to promote a geopolitical agenda. Asidefrom the financial costs of these disruptions, companies confrontthe risk of serious reputational damage, which may have a lingeringbusiness impact.