Cyber attacks stand among the foremost risks facing businesses today. A breach of consumer data or loss of trade secrets can cause enormous financial, legal, and reputational harm, and emerging threats may result in the disruption, destruction, or manipulation of critical systems or connected devices across the Internet of Things. Regulatory scrutiny likewise is increasing as new regulators enter a field that already has seen a proliferation of rules and regulatory guidance. Moreover, enforcement actions and putative class litigation now not only follow cyber attacks, but increasingly are initiated based only on purported vulnerabilities or allegedly inadequate procedures—not an actual hack. And the glare of press or congressional scrutiny can compound challenges facing victim companies.

As General Counsel of the National Security Agency, I saw firsthand the importance of addressing cyber threats in a coordinated and risk-based manner. I am proud now to lead a team of Cybersecurity & Data Privacy lawyers who deliver strategic advice and practical thinking on this crucial topic. While we provide counsel on a broad range of complex cybersecurity and data privacy issues—from board governance, supply chain and vendor management, and regulatory compliance to data breach preparation, response and litigation—our priority remains simple: to help clients safeguard their businesses and maintain the trust of key stakeholders.

National Cybersecurity Awareness Month (NCSAM) provides businesses an opportunity to consider their posture with respect to cyber threats. To advance those conversations, we will participate in a series of activities in October that offer incisive thinking on a wide range of cybersecurity issues. As a 2016 NCSAM Champion, we look forward to sharing relevant information and hope you will join us for some or all of the upcoming programs. Additional program information and thought leadership, including our new guide, Cybersecurity Regulation in the United States: Governing Frameworks and Emerging Trends, will be circulated throughout the month.

Learn more about our Cybersecurity & Data Privacy practice.

Visit us at

Mayer Brown is a global legal services provider comprising legal practices that are separate entities (the "Mayer Brown Practices"). The Mayer Brown Practices are: Mayer Brown LLP and Mayer Brown Europe – Brussels LLP, both limited liability partnerships established in Illinois USA; Mayer Brown International LLP, a limited liability partnership incorporated in England and Wales (authorized and regulated by the Solicitors Regulation Authority and registered in England and Wales number OC 303359); Mayer Brown, a SELAS established in France; Mayer Brown JSM, a Hong Kong partnership and its associated entities in Asia; and Tauil & Chequer Advogados, a Brazilian law partnership with which Mayer Brown is associated. "Mayer Brown" and the Mayer Brown logo are the trademarks of the Mayer Brown Practices in their respective jurisdictions.

© Copyright 2016. The Mayer Brown Practices. All rights reserved.

This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.