The arc of development of cybersecurity and data privacy as core business issues is at its three-quarters turn, having gone from a pure IT issue only five years ago to local laws that regulatory agencies are enforcing. The final turn will be passage of a uniform federal law.
Fallout from cyberattacks has become increasingly public, disruptive, and detrimental to public and private companies—and to their executives and boards.
As cyber risk continues to expand, data processing vendors may find themselves in more protracted negotiations over who will absorb the bulk of the liability.