If you belong to a public company, you are familiar with the SEC filing requirements you have to disclose risks to the stock and bottom line. Many public companies have now started including cyber security risks as part of those SEC filings. This includes Google after hackers compromised internal systems. The Google SEC filing states “because the techniques used [by hackers]…change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures.” If you are part of a public company, you may want to consider something similar.